Tiffany
Disclosed May 26, 20251 year ago4,600 affectedSettled
Vishing attack on Tiffany Korea exposes customer data
South Korea's PIPC said attackers used voice phishing to get a Tiffany customer service employee to grant access to its SaaS customer system, exposing data of 4,600 Korean clients, and fined Tiffany about $1.85 million.
What is known
| People affected | 4,600 (as reported by the organization) |
|---|---|
| Disclosed | May 26, 2025 |
| Happened | May 12, 2025 |
| Attack | Phishing |
| Data exposed | Names, Phone numbers, Emails, Addresses, Other |
| Sector | Retail · US |
| Status | Settled |
| Lawsuit or fine | About $1.85M fine by South Korea PIPC (2026) (about $1.9M) |
| Part of | Salesforce (2025) |
Sources
| Source | |
|---|---|
| Louis Vuitton, Dior, and Tiffany fined $25 million over data breachesbleepingcomputer.com · News | News |
| Vermont Attorney General: 2025-09-16 Tiffany and Company Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Tiffanyin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | May 26, 2025 | 4,600 |
| Vermont AGresidents of VT | Sep 16, 2025 | |
| Indiana AGresidents of IN | Sep 16, 2025 | 17 |
Same campaign
History of this record
- 2026-09-25 · occurred: empty to 2025-05-12 · backfill source
- 2026-09-25 · source_type: press to official · backfill source
- 2026-09-25 · source_url: https://www.bleepingcomputer.com/news/security/louis-vuitton-dior-and-tiffany-fined-25-million-over-data-breaches/ to https://ago.vermont.gov/document/2025-09-16-tiffany-and-company-data-breach-notice-consumers · backfill source
- 2026-09-25 · verified_by: empty to vt-ag · backfill source
- 2026-09-25 · verified: 0 to 1 · backfill source
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Vermont AG. Record counts are as reported. Not legal advice.