Hackers have stolen personal data from customers of luxury fashion group Kering, the parent company of brands including Gucci, Balenciaga and Alexander McQueen. The breach, which occurred in June 2025, potentially affected millions of customers, exposing names, phone numbers and email addresses.
Paris-based Kering confirmed the attack on Monday, stating that an unauthorised third party gained temporary access to its systems. The company emphasised that no financial information, such as bank account numbers or credit card details, was compromised. The attackers have been identified as the ransom-seeking group Shiny Hunters.
According to DataBreaches.net, Shiny Hunters posted samples of the stolen data on Telegram channels, including names, email addresses and dates of birth of some Gucci customers. The BBC reported that the samples also revealed spending amounts, with some customers spending up to $86,000 (£63,000) in stores.
Kering said it promptly identified the breach and took actions to secure affected systems and prevent future incidents. The company disclosed the breach to relevant authorities and notified customers according to local regulations. The attack follows similar breaches at other luxury brands, including Louis Vuitton in July, and recent cyber-attacks on British companies such as M&S, the Co-op and Harrods.
