Hackers have stolen data from customers of the luxury fashion group Kering, whose brands include Gucci, Balenciaga and Alexander McQueen.
Cyber-attackers have stolen data of potentially millions of customers, including the names, phone numbers and email addresses of customers of the fashion group, it has emerged.
Paris-based Kering said the breach happened in June and that no financial information – such as bank account numbers, credit card information, or government-issued identification numbers – was taken.
The attackers have been identified as a ransom-seeking group, Shiny Hunters.
Kering said on Monday: “In June 2025, we identified that an unauthorised third party gained temporary access to our systems and accessed limited customer data from some of our [fashion] houses.
“Our houses immediately disclosed the breach to the relevant authorities and notified customers according to local regulations.”
“The breach was promptly identified, and appropriate actions have been taken to secure the affected systems and prevent such incidents in the future,” the company added, without naming which brands had been affected.
According to one website tracking hacks, DataBreaches.net, Shiny Hunters this last month posted samples of the data breach on Telegram channels showing names, email addresses and dates of birth of some Gucci customers.
The BBC, which first reported Kering’s confirmation of the breach, said samples of the details showed how much some of the customers were spending in stores – in some cases up to $86,000 (£63,000). Shiny Hunters told the BBC it breached the brands in April.
skip past newsletter promotion
Sign up to Business Today
Get set for the working day – we’ll point you to all the business news and analysis you need every morning
Privacy Notice: Newsletters may contain information about charities, online ads, and content funded by outside parties. If you do not have an account, we will create a guest account for you on theguardian.com to send you this newsletter. You can complete full registration at any time. For more information about how we use your data see our Privacy Policy. We use Google reCaptcha to protect our website and the Google Privacy Policy and Terms of Service apply.
after newsletter promotion
In July, another luxury brand, Louis Vuitton, said it had been targeted by hackers who had taken customer data. The attacks follow serious breaches of British companies including M&S, the Co-op and Harrods.
Production remains halted at Jaguar Land Rover car factories for the third week after a cyber-attack forced it to shut down its computer systems.
