Crooks stole personal data of millions of Gucci, Balenciaga, and Alexander McQueen customers: parent firm Kering confirmed the breach.
Hackers stole private data of millions of Gucci, Balenciaga, and Alexander McQueen customers, including names, contacts, addresses, and spending details.
The parent company, Kering, confirmed the security breach and notified data protection authorities. The firm did not disclose the number of impacted customers.
Attackers stole millions of customers’ personal data, including names, email addresses, phone numbers, home addresses, and details of their spending at luxury stores worldwide. The BBC reports some customers spent up to $86,000, raising concern that leaked data could make “high spenders” targets for further scams.
Kering noted that no financial information was compromised in the security breach.
The BBC revealed that the group behind the attack is once again Shiny Hunters, which shared a small sample of the stolen data containing thousands of customer details with the United Kingdom’s public service broadcaster. According to BBC, the data appear to be genuine.
“The cyber criminal behind the attack calls themselves Shiny Hunters.” reported BBC. “They claim to have data linked to 7.4m unique email addresses which suggests the total number of individual victims could be similar.”
Shiny Hunters claimed to have breached Gucci, Balenciaga, and Alexander McQueen in April through Kering. However, the negotiations failed, and Kering refused to pay the ransom.
“In June, we identified that an unauthorized third party gained temporary access to our systems and accessed limited customer data from some of our Houses. No financial information – such as bank account numbers, credit card information, or government-issued identification numbers – was involved in the incident,” a Kering spokesperson told BBC.
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, Gucci, Balenciaga, and Alexander McQueen)
