Breaches and incidentsBriefReported by a reputable outlet, citing the company
Rituals: My Rituals loyalty database downloaded
Rituals said member data was downloaded from its “My Rituals” database: name, email, phone, date of birth, gender and home address depending on the customer.
- Disclosed
What happened
- Rituals said member data was downloaded from its “My Rituals” database: name, email, phone, date of birth, gender and home address depending on the customer; “no passwords or payment information were accessed.” Count not disclosed; the programme has over 41 million members, and US customers were notified.
- Root cause: not disclosed; Rituals was alerted to unauthorized downloads.
- No group has claimed it; Rituals declined attribution “for security reasons.”
- Authorities notified, access blocked, forensic investigation.
Sources
- https://www.bleepingcomputer.com/news/security/cosmetics-giant-rituals-discloses-data-breach-affecting-customers/
- https://www.cm-alliance.com/cybersecurity-blog/major-cyber-attacks-data-breaches-ransomware-attacks-in-april-2026
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.