Overview

• Hong Kong’s Office of the Privacy Commissioner opened a formal probe on July 21 into Louis Vuitton’s delay in notifying authorities about the data breach.
• Louis Vuitton first detected suspicious activity on June 13 and only notified regulators of the Hong Kong impact on July 17 after confirming affected customers on July 2.
• The breach exposed names, passport numbers, addresses, phone numbers, emails and shopping histories but did not involve any payment card information.
• Regulators in South Korea and the UK are also reviewing similar July intrusions at Louis Vuitton and assessing the brand’s overall incident response.
• Louis Vuitton says it is cooperating with authorities and has advised affected clients to stay alert for phishing attempts and monitor their personal information.