Incident

Louis Vuitton reports coordinated data breaches across multiple countries


Learn More

Luxury fashion giant Louis Vuitton has suffered a series of coordinated cyberattacks across multiple countries in June and July 2025, exposing customer data in Turkey, South Korea, and the United Kingdom. 

After the initial reports for an attack in of LVMH in South Korea, both the Turkey and UK operations report incidents. The cause of the attacks varies by location, with the Turkish operation specifically identifying the compromise of a third-party service provider's administrator account as the entry point. The Korean and UK operations described unauthorized third-party access to their systems but did not provide specific details about the attack vectors.

Exposed data inlcudes:

  • Names
  • Contact details (addresses, phone numbers, email addresses)
  • Purchase history
  • Gender information
  • Identity data

At least 142,995 individuals are reported as affected in the incident in Turkey The number of affected individuals in the UK and South Korea is not disclosed.

The companies stated they are "strengthening the security of our systems and working with the best experts in cyber security" and have notified relevant authorities in each jurisdiction. 

Update - as of 16th of July, Louis Vuitton has confirmed that the attack in all three countries was coordinated, related to the same incident and potentially linked to the ShinyHunters extortion group.

Louis Vuitton reports coordinated data breaches across multiple countries