Cybersecurity News in Asia

RECENT STORIES:

SEGA moves faster with flow-based network monitoring
Android trojan mimics human typing traits to evade behavioral detectio...
Embedding cybersecurity culture in financial institutions: lessons in ...
Upgrading biometric authentication system protects customers in the Ph...
Mastercard introduces first-ever threat intelligence solution to comba...
Around 16.4m email accounts added to largest dataset of stolen credent...
LOGIN REGISTER
CybersecAsia
  • Features
    • Featured

      Embedding cybersecurity culture in financial institutions: lessons in leadership, collaboration, and cyber resilience

      Embedding cybersecurity culture in financial institutions: lessons in leadership, collaboration, and cyber resilience

      Thursday, October 30, 2025, 11:37 AM Asia/Singapore | Features, Newsletter
    • Featured

      Biometrics and the digital identity crisis today

      Biometrics and the digital identity crisis today

      Tuesday, October 28, 2025, 3:30 PM Asia/Singapore | Features
    • Featured

      Collaboration and data security for today’s agentic workspace

      Collaboration and data security for today’s agentic workspace

      Wednesday, October 22, 2025, 1:42 PM Asia/Singapore | Features, Tips
  • Opinions
  • Tips
  • Whitepapers
  • Awards 2025
  • Directory
  • E-Learning

Select Page

News

French luxury conglomerate announces massive April 2025 multi-brand data breach

By CybersecAsia editors | Thursday, September 18, 2025, 4:55 PM Asia/Singapore

French luxury conglomerate announces massive April 2025 multi-brand data breach

Personal details belonging to 7.4m customers have since joined the stolen data of more than 1.25m other customers of luxury brands.

Luxury conglomerate Kering has confirmed this week a significant data breach affecting millions of customers of its brands.

The breach, which was discovered in June but had occurred in April, involves personal information including names, email addresses, phone numbers, physical addresses, and notably, customers’ total purchase amounts.

According to BBC reports, cybercriminals identifying as Shiny Hunters have claimed responsibility, asserting they hold data linked to 7.4m unique email addresses.

While Kering has reported that no financial data such as credit card details were compromised, the exposure of spending patterns — some customers having spent over US$10,000, with a few amounts reaching between US$30,000 and US$86,000 — raises concerns over potential targeted scams.

The threat group has reportedly contacted Kering to negotiate a Bitcoin ransom, which the firm has denied engaging with, adhering to law enforcement advice by refusing payment.

This incident aligns with a surge of cyberattacks on luxury brands in 2025, including breaches reported by LVMH and Richemont. Security experts warn luxury brands remain prime targets due to their valuable data on high-net-worth customers. The hacking group, also known as UNC6040 in FBI investigations, employs social engineering tactics such as vishing to bypass security controls, intensifying risks for affected individuals.

Kering has announced it has taken steps to strengthen its IT defenses post-incident and also informed impacted customers as required by data protection authorities.

The breach illustrates ongoing challenges that luxury retailers face amid growing sophisticated cyber threats targeting exclusive consumer data for potential fraud and extortion.

Currently, many jurisdictions require organizations to report data breaches to regulators within a specific timeframe—72 hours in the EU under GDPR and 60 days in some US states. However, these regulations do not universally mandate immediate public disclosure, allowing organizations to delay informing the public or affected individuals while conducting investigations and assessments. If cybersecurity laws are this flexible, is “too lax” the new standard?

Share:

PreviousFour CVSS 9.8 vulnerabilities in failure simulation tool expose Kubernetes clusters to takeover
NextCohesity and Semperis Announce Groundbreaking Offering that Unifies Data and Identity Resilience

Related Posts

Nexusguard: 1,000 percent increase in DNS amplification attacks

Nexusguard: 1,000 percent increase in DNS amplification attacks

Wednesday, September 18, 2019

Exposed: misconfigured access controls to sensitive corporate knowledge bases

Exposed: misconfigured access controls to sensitive corporate knowledge bases

Wednesday, September 25, 2024

RaaS group adds pentesting tool to their arsenal

RaaS group adds pentesting tool to their arsenal

Tuesday, July 19, 2022

Indonesian bank taps into data cloud platform to boost analytics and security

Indonesian bank taps into data cloud platform to boost analytics and security

Tuesday, July 14, 2020

Leave a reply Cancel reply

You must be logged in to post a comment.

Voters-draw/RCA-Sponsors

Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
previous arrow
next arrow

CybersecAsia Voting Placement

Gamification listing or Participate Now

PARTICIPATE NOW

Vote Now -Placement(Google Ads)

Top-Sidebar-banner

Whitepapers

  • 2024 Insider Threat Report: Trends, Challenges, and Solutions

    2024 Insider Threat Report: Trends, Challenges, and Solutions

    Insider threats continue to be a major cybersecurity risk in 2024. Explore more insights on …Download Whitepaper
  • AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    The future of cybersecurity is a perfect storm: AI-driven attacks, cloud expansion, and the convergence …Download Whitepaper
  • Data Management in the Age of Cloud and AI

    Data Management in the Age of Cloud and AI

    In today’s Asia Pacific business environment, organizations are leaning on hybrid multi-cloud infrastructures and advanced …Download Whitepaper
  • Mitigating Ransomware Risks with GRC Automation

    Mitigating Ransomware Risks with GRC Automation

    In today’s landscape, ransomware attacks pose significant threats to organizations of all sizes, with increasing …Download Whitepaper

Middle-sidebar-banner

Case Studies

  • Upgrading biometric authentication system protects customers in the Philippines: UnionDigital Bank

    Upgrading biometric authentication system protects customers in the Philippines: UnionDigital Bank

    An improved dual-liveness biometric framework can counter more deepfake threats, ensure compliance, and protect underbanked …Read more
  • HOSTWAY gains 73% operational efficiency for private cloud operations  

    HOSTWAY gains 73% operational efficiency for private cloud operations  

    With NetApp storage solutions, the Korean managed cloud service provider offers a lean, intelligent architecture, …Read more
  • CISOs can navigate emerging risks from autonomous AI with a new security framework

    CISOs can navigate emerging risks from autonomous AI with a new security framework

    See how security leaders can adopt layered strategies addressing intent, governance, and oversight to manage …Read more
  • MoneyMe strengthens fraud prevention and credit decisioning

    MoneyMe strengthens fraud prevention and credit decisioning

    Australian fintech strengthens risk management with SEON to scale lending operations securely and efficiently.Read more

Bottom sidebar

  • Our Brands
  • DigiconAsia
  • MartechAsia
  • Home
  • About Us
  • Contact Us
  • Sitemap
  • Privacy & Cookies
  • Terms of Use
  • Advertising & Reprint Policy
  • Media Kit
  • Subscribe
  • Manage Subscriptions
  • Newsletter

Copyright © 2025 CybersecAsia All Rights Reserved.