Newsletters
French luxury jeweler Cartier confirmed on Tuesday that it recently suffered a data breach, becoming the latest in a series of high-profile fashion brands to report cybersecurity incidents.
In an email sent to affected clients, Cartier disclosed that an unauthorized party had briefly gained access to its systems and obtained limited customer information.
The company emphasized that no sensitive financial data, such as passwords, credit card numbers, or banking details, was compromised. It added that the issue has since been contained and that additional safeguards have been implemented to reinforce system security.
Cartier also advised clients to remain vigilant for potential phishing attempts or suspicious messages, stating, “Given the nature of the data, we recommend that you remain alert for any unsolicited communications or any other suspicious correspondence.”
Meanwhile, U.S.-based outdoor clothing brand North Face also informed its customers that their personal data might have been stolen, as the company detected a “small-scale” attack that occurred in April.
In emails sent to affected customers, the company explained that attackers had used a method known as “credential stuffing”—a technique where stolen usernames and passwords from previous data breaches are used in attempts to access other accounts.
The company reported that some users’ shipping addresses and purchase histories may have been compromised. Customers impacted by the breach were instructed to reset their passwords to prevent further unauthorized access.
The Cartier and North Face breaches follow a wave of similar incidents across the fashion industry, underscoring growing concerns about digital security in luxury retail.
In May, fellow French luxury brand Dior acknowledged a breach in which threat actors gained access to customer contact details, purchase histories, and personal preferences. Although payment data was not compromised, the leak raised alarms due to the sensitive nature of customer profiling.
Adidas also warned customers last month after one of its third-party service providers was compromised, leading to the exposure of user contact information. As with Dior, no financial credentials were affected.
Meanwhile, lingerie retailer Victoria’s Secret was forced to temporarily take down its website and suspend some store services last week following a still-unresolved cybersecurity incident.
3 min read
