ThreatCluster

Rituals Reports Data Breach Involving Member Information

First seen 24 Apr 2026, 07:55 UTC www.rituals.com 52

Article Content

Browse articles
ThreatCluster

Rituals has confirmed an unauthorized download of member data, which occurred in April 2026. The compromised data includes full names, email addresses, phone numbers, dates of birth, genders, and addresses, but no passwords or payment information were accessed. The company acted quickly to stop the unauthorized download and has contained the situation. An in-depth forensic investigation is underway to understand the breach and prevent future incidents. Rituals has reported the incident to relevant authorities and informed affected members via email. They have not seen the extracted data become publicly available, but they advise members to remain vigilant against phishing attempts. The breach is not linked to previous birthday gift scam messages that circulated earlier. No immediate action is required from members.

Key Points: • Unauthorized download of member data confirmed by Rituals. • Compromised data includes personal information but no financial details. • Investigation initiated to prevent future breaches and monitor data exposure.

Timeline

2026-04-01
Unauthorized download of member data occurred
2026-04-22
Rituals published initial report on data breach
2026-04-24
Rituals confirmed breach details and ongoing investigation