Gucci, Balenciaga Parent Company Kering Hit by Data Breach

Luxury conglomerate Kering, parent company to iconic brands such as Gucci, Balenciaga, Saint Laurent, and Alexander McQueen, has confirmed a significant data breach impacting millions of its customers. The breach, which occurred in June 2025, involved the unauthorized access of customer data by the hacking group Shiny Hunters. 

The compromised data reportedly includes customer names, contact information (email addresses and phone numbers, potentially including mailing addresses), and purchase histories, detailing the amount spent on luxury goods. The extent of the breach is substantial, with Shiny Hunters claiming to possess data associated with approximately 7.4 million unique email addresses. 

While Kering has not publicly confirmed this precise figure, citing ongoing investigations and legal obligations under French data protection laws, the company has acknowledged a significant number of affected customers and initiated direct notification processes.

Kering’s response to the breach has involved immediate steps to secure its IT infrastructure and enhance its cybersecurity protocols to prevent future incidents. The company has also cooperated fully with relevant authorities, including law enforcement agencies and data protection regulators, providing comprehensive details of the breach and ongoing investigations. This proactive approach demonstrates a commitment to transparency and accountability, although the lack of precise details regarding the total number of affected individuals remains a point of concern for some.

The breach highlights the growing vulnerability of even the most established companies to sophisticated cyber attacks. The luxury goods sector, with its high value clientele and often sensitive purchase data, is increasingly becoming a target for cybercriminals seeking financial gain or reputational damage. This incident serves as a stark reminder of the importance of robust cybersecurity measures and proactive data protection strategies across all industries.

The potential ramifications for affected customers are significant. The leaked data, particularly the detailed purchase histories, could be exploited for targeted phishing campaigns, identity theft, or other forms of fraudulent activity. 

Kering has advised customers to remain vigilant against suspicious communications and to report any unusual activity to both the company and relevant authorities. The company has also stated it is offering affected customers credit monitoring services to mitigate potential risks.