Tiffany
Disclosed May 26, 20254,600 affectedSettled
Vishing attack on Tiffany Korea exposes customer data
South Korea's PIPC said attackers used voice phishing to get a Tiffany customer service employee to grant access to its SaaS customer system, exposing data of 4,600 Korean clients, and fined Tiffany about $1.85 million.
What is known
| People affected | 4,600 (as reported by the organization) |
|---|---|
| Disclosed | May 26, 2025 |
| Happened | May 12, 2025 |
| Attack | Phishing |
| Data exposed | NamesPhone numbersEmailsAddressesOther |
| Sector | Retail · US |
| Status | Settled |
| Lawsuit or fine | About $1.85M fine by South Korea PIPC (2026) (about $1.9M) |
| Part of | Salesforce (2025) |
Sources
Notices filed
Same campaign
History of this record
empty to 2025-05-12by backfillSource
press to officialby backfillSource
https://www.bleepingcomputer.com/news/security/louis-vuitton-dior-and-tiffany-fined-25-million-over-data-breaches/ to https://ago.vermont.gov/document/2025-09-16-tiffany-and-company-data-breach-notice-consumersby backfillSource
empty to vt-agby backfillSource
0 to 1by backfillSource
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Vermont AG. Record counts are as reported. Not legal advice.