Dior confirms China data breach

Luxury brand Dior on Tuesday confirmed that an unauthorized third party had accessed Chinese customer data while the affected database did not contain any financial details, mainland media reported.

This follows a text message Dior sent to its customers on Monday, alerting them to a data breach. 

According to the text message, Dior discovered the breach on May 7. 

The potentially affected personal data collected in China may include names, gender, phone numbers and other information voluntarily shared with Dior. 

No banking details, international bank account numbers, or credit card information were involved, it said.

Dior said it has taken steps to contain the breach and is working with cybersecurity experts to investigate the incident and report it to relevant regulators. 

The incident comes as Dior’s parent company LVMH reported a 3 percent year-on-year decline in group revenue to €20.3 billion (HK$175.8 billion) in the first quarter. 

Revenue in China (excluding Japan) dropped by 11 percent, with the market's share in total sales shrinking from 33 percent in 2024 to 30 percent.

Meanwhile, British retailer Marks and Spencer said some personal customer information was taken in the cyber attack that has crippled its online operation for more than three weeks.

The retailer, whose 1,000 stores remain open, is widely reported to have been the victim of a ransomware attack, where criminals infiltrate companies' computer systems, encrypt them and demand payment before allowing them to resume control.

M&S said some customer details had been taken, blaming the "sophisticated nature" of the incident, and said it would inform customers of the issue.

STAFF REPORTER AND REUTERS