HIGH SEVERITYRetail:Luxury

Kering Data Breach

Kering Luxury Fashion Group Breach (Salesforce, 2025): 56 Million Customer Contact Records Exposed

Luxury goods holding company.

Verified by ObscureIQ Intelligence

7.0Severity
56.4MRecords
3Fields
2025Year

ObscureIQ Breach Intelligence Scores
4.8
Breach Risk Index
10
Data Value
40
Market Recency
206
days
Since Breach

Risk Interpretation

High risk of phishing, procurement fraud, and affluent-customer targeting. Group-level data can also help attackers map brand relationships and high-value retail operations.

🎯 Impact & Downstream Threats

Kering was among the approximately 39 organizations listed on the Scattered LAPSUS$ Hunters dark web leak site in October 2025, with customer contact data including email addresses, phone numbers, and home addresses published as part of the Salesforce campaign. Security researchers noted that the Kering dataset represented a particularly high-value target because Gucci and other Kering brand customers include high-net-worth individuals — making the combination of names, contact information, and

Primary downstream threats:
  • SIM swap attacks where phone numbers are present
  • Targeted phishing campaigns using exposed email addresses
  • Doxxing risk from physical address exposure

🔓 Threat Vectors

Phishing, credential stuffing & account takeover
SIM swapping, vishing & SMS phishing
Physical stalking, mail fraud & identity verification
Home targeting, stalking & physical threat

📋 Breach Intelligence

EntityKering
OrganizationPublic Company • France / Global
Breach Date2025-10-10
DBC Added2025-10-03
Added Date2025-10-03
Records~56.4M (56,407,951 records)
Attack VectorUnknown
Threat ActorScattered Lapsus$ Hunters
Data SubjectsCustomer: Direct
Breach PathwaySupply_Chain:Platform
Supply ChainSalesforce
SourceDataBreach.com / ObscureIQ
SensitivityStandard
Breach ID741.0
StatusConfirmed

📝 Executive Summary

Kering, the French luxury goods group behind Gucci, Balenciaga, Bottega Veneta, Saint Laurent, Brioni, and Alexander McQueen, was caught up in a broad supply chain attack targeting Salesforce, the customer relationship management platform used across Kering's retail operations. A threat actor group calling itself "Scattered LAPSUS$ Hunters" claimed responsibility and released a sample of the stolen data on October 3, 2025, announcing a full release scheduled for October 10. Kering was one of roughly 39 organizations listed on the group's dark web leak site as part of the same campaign. The breach affected an estimated 56.4 million customer records. The exposed data includes names, dates of birth, email addresses, phone numbers, and home addresses, along with Salesforce system metadata and purchase amount data. Because Kering's customer base skews heavily toward high-net-worth individuals, the combination of personal contact details and luxury purchase context makes this dataset particularly useful to fraudsters. Attackers can use it to craft convincing phishing messages, impersonate brand representatives, or target wealthy individuals for procurement fraud and social engineering schemes. Kering has not made detailed public statements about the scope of its exposure in this campaign. No regulatory actions or individual notifications have been confirmed as of the time of writing. Affected customers should be alert to unsolicited contact claiming to be from Gucci, Balenciaga, or other Kering brands, and treat any requests for payment details or account credentials with suspicion.

🏢 About Kering

Kering is a French multinational luxury goods holding company that owns and manages a portfolio of high-end fashion and lifestyle brands including Gucci, Saint Laurent, Bottega Veneta, Balenciaga, Alexander McQueen, Brioni, and others. Headquartered in Paris, the company is publicly listed on Euronext Paris and operates across more than 100 countries through owned retail boutiques, wholesale accounts, and e-commerce platforms. Kering is one of the two dominant players in the global luxury goods conglomerate market alongside LVMH.

Company | Luxury goods and fashion brands | Global brand group | Global
Public CompanyFrance / Globalkering.com

🗂 Why They Hold Your Data

Luxury brand groups collect customer, employee, vendor, clienteling, and commerce records across multiple fashion and luxury houses, including contact, purchase, and operational data.

📰 Recent Developments

Kering has faced a challenging period for luxury goods demand, particularly at Gucci, its largest revenue contributor, which saw significant sales declines beginning in 2024. The company has brought in new creative leadership at Gucci and undertaken strategic repositioning efforts across the brand. Kering divested several assets and has been focused on margin and portfolio management amid softer global luxury demand.

🔍 Data Points Exposed

3 verified field types:
Email
Phone Number
Home Address

Exposure Categories

LocationPHYS ADDR

Canonical Fields

email_address, phone_number, physical_address:home

🌐 Dark Web Verification

Confirmed
  • Dataset containing ~56.4M records identified in breach intelligence sources
  • Data indexed and searchable across breach notification platforms
  • Source: kering-salesforce-2025

🛡 Recommended Actions

⚠️ Do not assume this is low sensitivity.

1Freeze Your Credit
Place a credit freeze with Equifax, Experian, and TransUnion.
2Expect Targeted Phishing
Watch for emails referencing this breach. Verify through official channels.
3Enable MFA Everywhere
Enable multi-factor authentication on all accounts.
4Monitor Accounts
Watch for unauthorized activity on financial and personal accounts.
5Check Your Exposure
ObscureIQ clients: this breach is indexed in your profile.

Protect Yourself

Check If You’re Affected

Enter your email to check if your data appears in this breach.

Get Free Breach Alerts

Be the first to know when new breaches are disclosed.

High-Risk? Get an Exposure Audit

Full-spectrum exposure audits for executives and public figures.

Request Consultation

ObscureIQ Advisory

We combine proprietary dark web access with commercial and restricted breach intelligence to verify exposure and assess real-world risk.

If you are:
  • A public-facing individual
  • A high-profile executive
  • A customer of Kering
  • Or concerned about credential reuse
Services
AuditsWipesThreat MonitoringTraining

Classification Tags

Luxury RetailEmailPhoneAddress

Powered by the ObscureIQ Breach Intelligence Database

© 2026 ObscureIQ · All Rights Reserved · Data Licensing

Latest from ObscureIQ

Credit

What Is Credit Monitoring? And Do I Want It? (Answer: Not Really)

July 14, 2025
Every time there’s a major data breach, companies scramble to offer “free” credit monitoring. It sounds like a responsible move.…
breach economycredit freezecredit scoreequifaxexperian
Credible Threats

Lock Down Browsers. Wipe Employee Footprints. Win Breach Wars.

September 2, 2025
Lock Down Browsers. Wipe Employee Footprints. Win Breach Wars. Over 80% of security incidents now start in the browser. Chrome.…
brave browserbreachesbrowser exploitbrowserschrome
Analysis

Sextortion Spam

May 10, 2025
Sextortion scams aren’t new, but they remain one of the most effective forms of cyber-enabled fraud. These scams don’t rely…
bitcoindeadlinefeargoogle maps apiransom