What Is This About?

Clarins Group (“Clarins”) was recently the target of a cyberattack by a ransomware group. If you believe you may have been impacted, we would like to speak with you about your rights and potential legal remedies.

What Happened?

In late 2024 or early 2025, Clarins Group became the target of a cyberattack affecting its international e-commerce platforms. The breach became public after the Everest ransomware group claimed responsibility and leaked samples of the stolen data on a dark web forum. Although the company has not issued a formal public statement, the attackers allege they accessed over 600,000 customer records, including personal and transactional information. The compromised data is believed to have originated from Clarins’ online stores across the United States, France, and Canada.

What Information Was Impacted?

Upon information and belief, the following types of sensitive personal information were compromised:
  • Name;
  • Date of birth;
  • Address;
  • Phone number;
  • Email address;
  • Purchase histories; and
  • Personal documents.
 

What Action Can You Take?

My Data Breach Attorney is investigating whether affected users are entitled to compensation. If you received a notice from Clarins there is no cost or obligation to participate. Complete the form above to find out about your rights and potential legal remedies available.

About Clarins

Clarins Group, headquartered in Paris, France, is a luxury skincare company that specializes in beauty and skincare products. It operates online and in retail locations across the globe, including the U.S., France, and Canada.

About

My Data Breach Attorney

Backed by the nationally recognized law firm Levi & Korsinsky, we combine decades of legal expertise with an unwavering focus on consumer advocacy. Levi & Korsinsky is a nationally recognized consumer advocacy law firm that has recovered hundreds of millions of dollars against the largest of corporations. The firm is a 100% contingency firm – we don't get paid unless you get paid! Prior results do not guarantee similar outcomes.

Frequently Asked Questions

Know Your Legal Rights After a Data Breach Incident

A data breach occurs when sensitive, confidential, or protected information is accessed, disclosed, or stolen without authorization. This may include personal data, financial information, medical information, or business secrets.

Our firm provides the following services:

  • Investigating the breach and determining liability.
  • Filing lawsuits or claims against negligent companies.
  • Helping recover financial damages.
  • Advising on legal steps to protect your rights.

As a consumer, you have the right to:

  • Be notified of the breach under U.S. laws, such as the California Consumer Privacy Act (CCPA) or General Data Protection Regulation (GDPR) if applicable.
  • Seek compensation for financial or reputational harm.
  • Take legal action against the entity responsible for negligence.

Depending on the case, you may be entitled to:

  • Reimbursement for financial losses (e.g., identity theft).
  • Compensation for emotional distress or loss of privacy.
  • Punitive damages if negligence is proven.

Yes, time is critical. If you suspect your data has been compromised:

  • Secure your accounts by changing passwords.
  • Monitor your credit reports for unusual activity.
  • Contact a law firm to explore legal options for compensation.

Our firm works on a contingency fee basis, meaning you pay nothing upfront. We only get paid if we recover compensation for you.

Take Action. Choose My Data Breach Attorney