Unauthorised parties have downloaded customer data from cosmetics company Rituals’ membership programme. The company emphasised that no payment details or passwords were compromised.