Kering breach exposes customer data after hack by ShinyHunters

A hacking group breached systems at Kering, the French luxury conglomerate that owns Gucci, Balenciaga and Alexander McQueen, in April, stealing personal details of potentially millions of customers worldwide, the company and security researchers said. The group calling itself ShinyHunters told the BBC it holds data tied to 7.4 million unique email addresses, while Kering confirmed in June that an unauthorised third party had gained temporary access to its systems and accessed limited customer data from some of its Houses.

Kering said the compromised information includes names, email addresses, phone numbers, home addresses and records of how much customers had spent at the affected brands. The company stated no financial information, such as credit card or bank account numbers, or government issued identification numbers, was involved in the incident and that it had disclosed the breach to relevant data protection authorities and notified affected customers in line with local regulations. Kering also said it had secured its IT systems after identifying the intrusion.

The BBC reported that ShinyHunters provided a small sample of the data, which appeared to contain thousands of...