Gucci Data Breach Exposes 7.4M Customer Records to Hackers

Luxury fashion giant Kering has confirmed a massive data breach affecting its premium brands, including Gucci, Balenciaga, and Alexander McQueen.

The attack, carried out by notorious hacker group Shiny Hunters, compromised personal information from approximately 7.4 million customers worldwide.

Details of the Gucci Data Breach

The breach occurred in April 2025, though Kering didn’t publicly acknowledge the incident until Monday after cybersecurity blog DataBreaches.Net broke the story.

Hackers gained unauthorized access to customer databases containing names, email addresses, phone numbers, home addresses, and total purchase amounts from stores globally.

While no financial data like credit card numbers or bank account details were stolen, the breach exposed sensitive shopping habits.

Some customers in the leaked sample had spent between $30,000 and $86,000 at these luxury retailers, making them prime targets for future scams.

TROYPOINT Tip: Protect your identity and personal info from a data breach by using Aura which is TROYPOINT’s recommended identity theft protection.

Aura Identity Theft Protection Review

The Ransom Demand

Shiny Hunters contacted Balenciaga in early June demanding a $750,000 Bitcoin ransom payment.

According to negotiation transcripts obtained by DataBreaches.Net, the fashion house initially agreed but later refused to pay. The hackers then released sample data and chat logs after waiting over two months for payment.

Kering denies engaging in ransom negotiations, stating the company follows law enforcement guidance against paying cybercriminals.

Growing Threat Pattern

This attack represents part of a broader campaign targeting luxury brands. Google security researchers have linked Shiny Hunters to attacks on over 700 companies this summer, including AT&T, Workday, and a breach affecting Google itself.

The group reportedly works with Scattered Spider, a sophisticated ransomware gang known for social engineering tactics.

Security experts believe these hackers trick employees into revealing login credentials for internal company systems like Salesforce, providing access to customer databases.

Company Response

Kering spokesperson confirmed: “In June, we identified that an unauthorized third party gained temporary access to our systems and accessed limited customer data from some of our Houses.” The company has since secured its IT infrastructure and notified relevant data protection authorities.

Affected customers received email notifications about the breach, though Kering hasn’t disclosed the exact number of victims.

The company isn’t legally required to make public statements as long as individual customers are directly informed, as we didn’t find any public information on their website.

Final Thoughts

The Gucci data breach underscores the persistent threat facing major corporations from organized cybercriminal groups.

The exposure of customer spending patterns creates ongoing security risks that affected individuals should actively monitor.

For more details on this story, refer to the initial report from databreaches.net and the report from the BBC.

We want to know your thoughts. What do you think about this story? Let us know in the comment section below!

Be sure to stay up-to-date with the latest streaming news, reviews, tips, and more by following the TROYPOINT Advisor with updates weekly.