Hackers Steal Customer Data from Gucci, Balenciaga, and Alexander McQueen Parent Company

Hackers known as Shiny Hunters have stolen sensitive customer data from luxury brands Gucci, Balenciaga, and Alexander McQueen, all owned by French company Kering. The breach, which occurred in April, exposed personal details such as names, email addresses, phone numbers, addresses, and spending records of potentially millions of customers. While financial information like credit card numbers or bank details was not compromised, the data reveals how much customers spent in stores, with some records showing purchases exceeding $80,000. This poses additional risks, as high-spending clients may become targets for further scams or cyberattacks if the information is leaked.

The hacker claims to hold data linked to 7.4 million unique email addresses and approached Kering in June, allegedly attempting ransom negotiations. However, Kering denies engaging with the criminal and has confirmed it will not pay a ransom, in line with law enforcement recommendations. The company says it has notified affected customers directly and reported the incident to data protection authorities. It also emphasized that its systems have since been secured.

This attack follows a wave of similar incidents targeting luxury brands such as Cartier and Louis Vuitton. Cybersecurity experts, including those at Google, have identified Shiny Hunters—also known as UNC6040—as a group exploiting employee login credentials to breach corporate systems. The incident highlights the growing vulnerability of high-profile fashion companies to cybercrime and raises concerns about customer safety in the digital retail environment.