Late April 2026, Rituals publicly confirmed unauthorized activity affecting its My Rituals membership data. Trade press summarized exposure of names, contact information, dates of birth, and preference or store metadata, while the company’s messaging emphasized that passwords and payment data were not in scope. Members in Europe, the UK, and the U.S. were discussed in coverage—read regional FAQs for final wording.
Canonical record: Rituals 2026 on BreachHistory.
Sources: TechCrunch, Rituals FAQ