Every public data breach

44 disclosed this week · 26,355 on record

Tiffany

Disclosed May 26, 20254,600 affectedSettled

Official notice

Vishing attack on Tiffany Korea exposes customer data

South Korea's PIPC said attackers used voice phishing to get a Tiffany customer service employee to grant access to its SaaS customer system, exposing data of 4,600 Korean clients, and fined Tiffany about $1.85 million.

What is known

People affected4,600 (as reported by the organization)
DisclosedMay 26, 2025
HappenedMay 12, 2025
AttackPhishing
Data exposedNamesPhone numbersEmailsAddressesOther
SectorRetail · US
StatusSettled
Lawsuit or fineAbout $1.85M fine by South Korea PIPC (2026) (about $1.9M)
Part ofSalesforce (2025)

Sources

Notices filed

Same campaign

GainsightSupply chain exposed names, emails and phone numbers.Supply chainTechUSUnverifiedNov 19, 2025StellantisVendor breach exposed names, emails, phone numbers and addresses.Vendor breachManufacturingNLUnverifiedSep 21, 2025KeringShinyHunters steal Gucci, Balenciaga and other Kering customer dataHackingRetailFRUnverifiedSep 15, 2025WorkivaVendor breach exposed names, emails and phone numbers.Vendor breachTechUSUnverifiedSep 3, 2025TransUnionVendor breach exposed names, dates of birth, Social Security numbers, addresses, phone numbers and emails. Reported to the California AG.Vendor breach4.5M affectedFinanceUSAug 26, 2025Farmers InsuranceVendor breach exposed names, addresses, dates of birth, government IDs and Social Security numbers.Vendor breach1.1M affectedInsuranceUSUnverifiedAug 22, 2025WorkdayPhishing exposed names, emails and phone numbers.PhishingTechUSUnverifiedAug 15, 2025Air France-KLMAir France and KLM customer service platform breachedVendor breachTransportFRAug 6, 2025PandoraVendor breach exposed names, dates of birth and emails.Vendor breachRetailDKUnverifiedAug 5, 2025GoogleShinyHunters steal business contact data from Google Salesforce instancePhishingTechUSUnverifiedAug 5, 2025CiscoVishing attack on Cisco CRM exposes Cisco.com user profilesPhishingTechUSUnverifiedAug 4, 2025ChanelVendor breach exposed names, emails, addresses and phone numbers.Vendor breachRetailFRUnverifiedAug 4, 2025Allianz LifeSalesforce CRM social engineering exposes 1.5 million Allianz Life recordsPhishing1.5M affectedInsuranceUSUnverifiedJul 26, 2025Louis VuittonHacking exposed names, phone numbers, emails and addresses.HackingRetailFRUnverifiedJul 10, 2025QantasCall center hack exposes 5.7 million Qantas customers' recordsVendor breach5.7M affectedTransportAUUnverifiedJul 2, 2025AdidasVendor breach exposed names, emails, phone numbers, dates of birth and addresses.Vendor breachRetailDEUnverifiedMay 23, 2025DiorVendor breach exposed names, phone numbers, emails and addresses.Vendor breachRetailFRUnverifiedMay 13, 2025
History of this record
occurred2026-09-25
empty to 2025-05-12by backfillSource
source_type2026-09-25
press to officialby backfillSource
source_url2026-09-25
https://www.bleepingcomputer.com/news/security/louis-vuitton-dior-and-tiffany-fined-25-million-over-data-breaches/ to https://ago.vermont.gov/document/2025-09-16-tiffany-and-company-data-breach-notice-consumersby backfillSource
verified_by2026-09-25
empty to vt-agby backfillSource
verified2026-09-25
0 to 1by backfillSource
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research), confirmed by Vermont AG. Record counts are as reported. Not legal advice.

Everything about Tiffany