Kering hit by massive data breach impacting Gucci and Balenciaga clients

Just when we thought there had been a halt on luxury fashion hijackings, Kering confirmed that millions of customer records from Gucci, Balenciaga, Brioni and Alexander McQueen were stolen in a cyberattack.

The breach, which was reportedly carried out by the hacker group ShinyHunters, highlights the growing vulnerabilities facing fashion’s biggest names as digital shopping expands.

The attack exposed names, contact details, addresses, dates of birth and purchase histories, but not financial information such as bank account or credit card details, Kering said. The group added that it identified the breach in June and notified customers in line with local regulations, although the UK’s Information Commissioner’s Office told The Times it had not been informed.

Reports suggest that ShinyHunters stole as many as 56 million records across two attacks, one targeting Gucci last year and another against Kering’s other brands in April. The cybercriminal group, which recently claimed to have merged with Scattered Spider, allegedly demanded a €750,000 (£648,000)  bitcoin ransom from Balenciaga for the return of the stolen data, but negotiations reportedly broke down.

Although Kering has emphasised that financial details were not compromised, cybersecurity experts warn that high-net-worth individuals - who make up a significant share of luxury customers -  remain prime targets. Ade Clewlow of NCC Group said: "Customers should therefore be hyper-vigilant to phishing attempts seeking personal information, online credentials, or payment of any kind."

Joseph Rooke, Director of Risk Insights at Recorded Future’s Insikt Group, added: "Attackers are drawn to these companies not only because of the global recognition of their brands, but also because their customer bases include high-net-worth individuals whose personal details can be especially valuable.

"The exposure of customer information, including spending data, raises particular concerns as this type of detail in a criminal’s hands can increase the risk of fraud or scams. While no payment information was taken, this incident is another critical reminder of the importance of protecting personal data across all systems, not just financial platforms."

Earlier this year, other retailers, including Harrods, Cartier, Louis Vuitton, M&S and Co-Op also suffered attacks, signalling that fashion and retail remain a prime hunting ground for hackers.

For Kering, which has been investing heavily in digital channels and customer engagement, the hack underscores the need for robust defences as cyberattacks increasingly target the world’s most valuable luxury players and their customer bases.

This couldn't have come at a worse time for Kering, which is seeking to restore its fortunes. In July, Kering posted a 16% decline in revenue to €7.6 billion (£6.5 billion) for the first half of 2025, driven by a 26% drop in sales at its flagship brand, Gucci.

It's rumoured that Francesca Bellettini is poised to take the reins at Gucci, with sources indicating Kering is preparing to appoint the accomplished executive as the brand’s next boss. The move would see Kering Deputy Chief Executive Bellettini replace Stefano Cantino, who is expected to leave the role after less than a year, a sign of just how urgent Gucci’s turnaround has become.