Louis Vuitton Hong Kong data breach exposes personal information of 419 K customers
Learn More
Louis Vuitton Hong Kong reports a data breach that compromised the personal information of approximately 419,000 customers. The Office of the Privacy Commissioner for Personal Data announced on Saturday that it had launched a formal investigation into the incident after being notified by the luxury fashion retailer on Thursday, 17th of July 2025.
The security incident is part of a broader multinational cyberattack that has affected Louis Vuitton in United Kingdom, South Korea, and Turkey. The French luxury retailer detected suspicious activity within its computer system on June 13, 2025, but did not discover the impact on Hong Kong customers until July 2, 2025.
The compromised data includes:
- Names
- Passport numbers
- Dates of birth
- Addresses
- Email addresses
- Telephone numbers
- Shopping history
- Product preferences
The investigation by Hong Kong's privacy regulator will determine whether Louis Vuitton complied with local data protection requirements and whether appropriate security measures were in place to protect customer information.
Louis Vuitton has confirmed that the attack in United Kingdom, South Korea, and Turkey was coordinated, related to the same incident and potentially linked to the ShinyHunters extortion group.
