Rituals Cosmetics Hit by Data Breach, Exposing Customer Personal Information Amsterdam-based cosmetics retailer Rituals has confirmed a data breach exposing sensitive customer information, marking the latest in a string of cybersecurity incidents affecting Dutch companies. The stolen data includes full names, addresses, phone numbers, email addresses, dates of birth, and gender, as well as details about account types and preferred stores. While passwords and payment information were not compromised, the breach has raised concerns over potential phishing attacks. Rituals, which operates over 1,500 stores across 33 countries and reported €2.4 billion in turnover for 2025, has not disclosed the number of affected customers but confirmed that notifications were sent to individuals in multiple European countries. The company has reported the incident to the Dutch privacy watchdog Autoriteit Persoonsgegevens (AP) and is collaborating with external specialists to monitor the dark web for any leaked data. Though Rituals stated there is no evidence the stolen information has been published online, it warned customers to remain vigilant against phishing attempts, as cybercriminals could use the exposed details to craft convincing fraudulent messages. The breach follows a series of similar incidents in the Netherlands, including a February attack on telecom provider Odido that exposed 6.2 million records, a Booking.com data breach earlier this month, and a cyberattack on fitness chain Basic-Fit affecting up to one million European members. Rituals has faced recurring issues with scammers impersonating the brand in "birthday gift" phishing emails over the past year, though the company maintains those incidents are unrelated to the current breach.