Kering cyber-attack compromises data of 7.4 million clients from Gucci, Balenciaga and more. Experts warn of rising fraud and extortion threats

Kering cyber-attack revelations have sent shockwaves through the global fashion industry, with over 7.4 million luxury clients potentially affected by the high-profile data breach.

Also read: Nigerian Exchange Gains N254bn as Banking, Insurance Stocks Soar

Kering, parent company of iconic brands like Gucci, Balenciaga, and Saint Laurent, confirmed that hackers infiltrated its systems earlier this year, accessing sensitive customer information.

The breach, traced back to April 2025, has been claimed by the notorious hacker group Shiny Hunters.

While Kering maintains that no banking details or government IDs were exposed, internal documents obtained by the BBC reveal worrying financial data—specifically, how much individual clients have spent.

Some high-profile customers reportedly spent upwards of $30,000 to $86,000**, making them prime targets for phishing, extortion, and fraud attempts.

Despite the gravity of the Kering cyber-attack, the company did not issue a public statement, instead opting to quietly notify affected individuals via email.

Under French data protection law, companies are not required to disclose a breach publicly if customers are directly informed.

Shiny Hunters told the BBC they demanded a Bitcoin ransom in June but claimed Kering refused to negotiate.

The company insists it followed law enforcement advice not to pay and confirmed it had since “secured its IT systems.”

“In June, we identified that an unauthorized third party gained temporary access to our systems and accessed limited customer data.

No financial information was involved,” a Kering spokesperson said.

The Kering cyber-attack is part of a wider surge in luxury-sector breaches, with Cartier and Louis Vuitton also reporting similar incidents in recent months.

Whether the same hacking group is responsible remains unclear.

Cybersecurity analysts at Google say the group, internally referred to as UNC6040, is currently using advanced phishing techniques to trick employees into giving up Salesforce login credentials. Even Google was hit earlier this year.

As the dust settles, the Kering cyber-attack may represent the most significant security challenge the luxury fashion world has ever faced.

Also read: Senator Mudashiru Husain salutes Omisore at 68

With millions of ultra-wealthy customers potentially compromised, experts fear the worst may still be yet to come.