The House of Dior, a renowned French luxury fashion brand, has revealed a cybersecurity incident that has compromised customer information, according to a spokesperson for the company. The breach reportedly affects customers of Dior Fashion and Accessories, prompting immediate action and investigations by both the firm and leading cybersecurity experts.
In a statement provided to BleepingComputer, the spokesperson stated, “The House of Dior recently discovered that an unauthorized external party accessed some of the data we hold for our Dior Fashion and Accessories customers.” They confirmed that although customer data was breached, sensitive information such as payment card details or passwords were stored in a different, unaffected database.
Dior is actively notifying relevant regulatory bodies and affected customers, adhering to applicable laws as part of their response to the incident. The company expressed its commitment to the confidentiality and security of customer data, stating, “We sincerely regret any concern or inconvenience this matter may cause our customers.” Meanwhile, the South Korean and Chinese markets are confirmed to be involved, with notifications sent to customers in those regions.
An investigation revealed that on May 7, 2025, unauthorized personnel accessed a database containing personal information, including full names, genders, phone numbers, email addresses, postal addresses, and purchase history. Although Dior has not disclosed the number of affected customers, it has prompted reports of impacted individuals in China and Korea, with the latter facing legal scrutiny regarding insufficient notification to authorities, as reported by Korea JoongAng Daily.
As a precautionary measure, Dior is advising customers to remain vigilant against potential phishing attempts involving their personal information and to reach out immediately in case of impersonation attempts. The full extent of the breach and the total number of affected customers is still pending disclosure from the fashion house.