Share this article on:
Powered by MOMENTUMMEDIA
For breaking news and daily updates,
subscribe to our newsletter.
Major high-end fashion brand Louis Vuitton has revealed that Australian consumers have been affected by the cyber attack it suffered earlier this month.
This week, Australian Louis Vuitton customers were notified of the cyber attack, which occurred on 2 July.
“We regret to inform you that an unauthorised third party temporarily accessed our system and obtained some of your information,” the email to customers said, as seen by The Sydney Morning Herald.
As previously disclosed by the company, no financial data or passwords, “such as credit card information, bank details or financial accounts”, were contained in the database accessed by the threat actor.
The company did not disclose how many Australians were affected, but it said it has secured its network and blocked the access.
While the threat actor behind the incident is unknown, CyberCX executive director Katherine Mansted has raised the possibility that the infamous ShinyHunters hacking group is behind the attack.
“It’s open cyber season on luxury retail brands globally,” she said.
“The Louis Vuitton breach is just the latest in a string of cyber incidents for the sector, with big names like Tiffany, Dior, Adidas, Victoria’s Secret and Cartier disclosing incidents since just April. Ransomware group ShinyHunters is likely behind some, but not all of these.”
The mention of ShinyHunters is an interesting one, best known as a prolific user and former owner of equally infamous hacking forum BreachForums.
While the threat actor is known for stealing large amounts of data from major companies and government agencies, ShinyHunters, or at least an individual representing the group, was arrested, according to the current BreachForums admin, Jaw.
“Most of you know me – I’m Jaw. I’ve decided to bring back the forum we all loved. BreachForums will officially reopen on July 1st,” he said in an email on 30 June, following the latest takedown and restart of BreachForums.
“First, thank you to those who choose to return and rebuild. But let’s be clear: ShinyHunters and IntelBroker have been arrested. With them, the servers and database were seized, now in the hands of US and French authorities,” Jaw said.
However, the Louis Vuitton cyber attack occurred two days after Jaw’s email.
ShinyHunters first formed in 2020, with its name likely referring to players of the Pokemon games, where hunting what are referred to as “shiny” pokemon is a popular challenge.
Alleged victims of the group include Dell, AT&T, Pizza Hut, Ticketmaster and more.
Be the first to hear the latest developments in the cyber industry.