THE WHAT?  British cosmetics retailer Lush has confirmed a cybersecurity incident.

THE DETAILS  The company operates in 49 countries with production facilities in Europe, Japan, and Australia.

THE WHY? Lush is conducting an investigation with external IT forensic specialists and has informed relevant authorities, including the UK’s Information Commissioner’s Office (ICO).