Skip to content

Onslaught of Cyber Theft Targets Gucci and Balenciaga, Swiping Customer Information

Luxury fashion brands Gucci, Balenciaga, Alexander McQueen, and Brioni, all under the Kering umbrella, suffer a significant cyberattack at the hands of the Shiny Hunters.

Cybercriminals Successfully Breach Gucci and Balenciaga, Swiping Customer Information
Cybercriminals Successfully Breach Gucci and Balenciaga, Swiping Customer Information

Onslaught of Cyber Theft Targets Gucci and Balenciaga, Swiping Customer Information

In a series of cyberattacks this year, several luxury brands have fallen victim to data breaches. The latest victims are German boat builder Lurssen and automobile manufacturer Ferrari, joining a list that includes Gucci, Balenciaga, Alexander McQueen, Brioni, Louis Vuitton, and Christie's.

Last year, RansomHub was behind a cyberattack on Christie's, revealing clients' names, birth dates, and nationalities. Earlier this year, Louis Vuitton experienced a data breach, with 419,000 customer records leaked, including personal data like names, phone numbers, and e-mail addresses.

Unlike the cyberattacks on Gucci, Balenciaga, Alexander McQueen, Brioni, Louis Vuitton, and Christie's, no information about financial information, such as bank account numbers, credit card information, or government-issued identification numbers, has been reported in the Lurssen or Ferrari breaches.

The Lurssen and Ferrari cyberattacks are the first known cases of such incidents in the auto and superyacht industry in 2023. The extent of the damage caused by these attacks is not yet clear, as specific details about the stolen data have not been disclosed. Lurssen became aware of the breach in June and took appropriate actions to secure the affected systems.

In a separate incident, the hacker group Shiny Hunters is believed to be responsible for the attack on Gucci, Balenciaga, Alexander McQueen, and Brioni, all owned by Kering. The stolen records include names, contact details, addresses, birth dates, and purchase histories. The hacker group attempted to extort Balenciaga for nearly $890,000 in bitcoin in exchange for the return of the consumer data.

The cyberattacks occurred in two phases: one in the past against Gucci, and one in April against the other three brands. Kering denies having been in contact with the hackers. The suspected Bitcoin demand to Balenciaga after the second cyberattack is believed to have been made by the ransomware group ALPHV (BlackCat).

These cyberattacks against luxury brands in the auto and superyacht industry are in addition to those suffered by Gucci, Balenciaga, Alexander McQueen, Brioni, Louis Vuitton, and Christie's in previous years. They serve as a reminder of the increasing risk of cyber threats in the luxury industry. The Lurssen and Ferrari cyberattacks underscore the importance of implementing robust cybersecurity measures to protect sensitive consumer data in the luxury industry.

Read also:

Latest