2025 ShinyHunters — 7.4M luxury customer records
Data compromised
Names, emails, phones, addresses, customer spend data
Technical writeup
Kering (Gucci, Balenciaga, Alexander McQueen, YSL) confirmed breach. ShinyHunters targeted Salesforce/CRM. Breach in April, detected June, disclosed September. Names, emails, phones, addresses, detailed spend data (up to $86k per customer). No financial data. Ransom refused.
Root cause
ShinyHunters; cloud/Salesforce compromise