Rituals Cosmetics confirmed an unauthorized data breach of its customer membership database in April 2026, resulting in the theft of personal information including names, dates of birth, addresses, and contact details. The specific attack vector and method of intrusion were not disclosed by the company, and an investigation is ongoing. No CVSS score, affected system versions, patches, or technical workarounds were provided in the source article.
Data Security , Breach Rituals confirms data breach of customer membership database April 23, 2026 Share By SC Staff (Adobe Stock) Cosmetics company Rituals has confirmed a data breach impacting its membership database, leading to the theft of personal customer information. The company disclosed the incident on Wednesday, stating that an unauthorized download occurred in April. This breach affects customers in Europe, the United Kingdom, and some in the United States, with further coverage provided by TechCrunch. Hackers gained access to Rituals' membership database, stealing data that includes customers' full names, dates of birth, gender, postal and email addresses, and phone numbers. The compromised information also contains details about preferred Rituals stores and account types. Rituals has not disclosed the specific method of the cyberattack, and an investigation is ongoing to determine how the breach occurred. This incident follows similar data thefts at other retailers like Co-op and Marks & Spencer, where customer records are often targeted for potential ransom demands. Source: TechCrunch SC Staff Related Data Security OpenAI’s Chronicle mirrors Microsoft Recall’s privacy concerns SC Staff April 23, 2026 Chronicle functions by taking screenshots of the user's screen and feeding them to OpenAI's Codex agent to augment its memory with contextual data. Data Security UK ransomware attacks shift to targeted methods, small businesses most affected SC Staff April 23, 2026 Security researchers at SonicWall reported that ransomware actors have moved away from broad, untargeted attacks to more human-operated, "big game hunting" methodologies. Security Operations UK intelligence warns of widespread commercial spyware access by governments SC Staff April 23, 2026 The UK National Cyber Security Centre's report highlights an increase to 100 nations having access to these hacking tools, up from 80 countries estimated last year. Related Events Cybercast Beyond the Hype: The Cybersecurity Trends CISOs are Keeping an Eye on in 2026 On-Demand Event Cybercast Beyond the data perimeter: Why next-generation DSPM is the foundation for modern data security On-Demand Event Virtual Conference Securing the Future of Finance: Strategies to Counter Modern Cyber Threats On-Demand Event Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Attack Vector Byte Cipher Ciphertext Cryptographic Hash Functions Cyclic Redundancy Check (CRC) Data Aggregation Data Encryption Standard (DES) Data Loss Prevention (DLP) Decryption You can skip this ad in 5 seconds