Overview

• Kering said an unauthorized party temporarily accessed its systems in June and obtained limited customer data from some houses, with regulators and affected customers notified.
• The company said names, contact details and store spend totals were accessed, and that no bank, credit card or government ID numbers were involved.
• A group identifying itself as ShinyHunters claimed responsibility and told the BBC it holds data linked to about 7.4 million unique email addresses, providing a small sample that appeared genuine.
• Media reported ransom overtures and alleged negotiations, but Kering says it refused to pay and denies engaging in talks.
• The incident aligns with a broader 2025 wave of attacks on luxury and retail brands, with researchers highlighting Salesforce-related compromises and social‑engineering tactics.