Exclusive: High-end fashion retailers Gucci, Balenciaga, Brion, and Alexander McQueen hit by Salesforce attacks

Exclusive: High‑end fashion retailers Gucci, Balenciaga, Brioni and Alexander McQueen were targeted in Salesforce data‑extortion attacks, with DataBreaches[.]Net noting two breaches affecting more than 50 million records in total. According to ShinyHunters, Gucci was breached in 2024, with a sample of more than 900 records showing fields such as Name, Email, and CreatedDate, and the full Gucci dataset reportedly comprising 43,483,137 records.

The second breach affected Balenciaga, Brioni and Alexander McQueen, with a sample of over 900 records and a total of 12,924,814 records. The posts describe cross‑brand data stored in a single database and cite dates ranging from 2017 to early 2024 for Gucci, and 2017 through 2024 for the other brands, while noting that Kering has not publicly acknowledged the breaches.

The piece also details negotiation timelines, ransom talks, and law‑enforcement arrests connected to ShinyHunters, though it stresses that DataBreaches has not yet seen official notifications to regulators or customers.