Rituals Discloses Customer Data Breach Affecting My Rituals Members
Summary
Rituals says attackers downloaded personal data from its My Rituals membership database. Potentially exposed fields include contact and demographic details. The company says passwords and payment data were not accessed, access was blocked, and the affected-member count
Key points
- Rituals says it discovered unauthorized downloads of My Rituals members’ data earlier this month.
- Potentially exposed information may include names, email addresses, phone numbers, dates of birth, gender, and home addresses.
- Rituals says passwords and payment information were not accessed.
- The company says it blocked the attackers, notified authorities and affected customers, and is conducting a forensic investigation.
- Rituals has not disclosed how many members were affected or identified a responsible threat actor; it says it has not found evidence that the data was leaked online.
Article Details
- Victim Organization
- Rituals
- Incident Type
- Data breach involving unauthorized downloads and exfiltration of personal information from the My Rituals membership database.
- Data Types Exposed
- Full name
- Email address
- Phone number
- Date of birth
- Gender
- Home address
- Affected Records
- Not disclosed; Rituals did not share the number of affected customers.
- Operational Impact
- Rituals blocked the attackers’ access, notified relevant authorities and affected customers, and initiated a forensic investigation. The company reported no evidence that the stolen information had been leaked online.
- Ransom Or Extortion
- No ransom or extortion activity reported.
- Claim Status
- confirmed