
The House of Dior has suffered a data breach involving the personal information of customers from its fashion and accessories e-commerce platforms. Company representatives have confirmed that the incident involved unauthorized access to portions of data stored within the Dior Fashion and Accessories database. While the investigation remains ongoing, it has already been established that users in South Korea and China were affected by the breach.
According to Dior officials, the unauthorized access was detected on May 7, 2025. In the immediate aftermath, the company launched containment measures and enlisted external cybersecurity experts to assess the scope and mitigate the impact of the intrusion. It is emphasized that clients’ payment information and passwords were stored in a separate database, which remained uncompromised.
In formal notifications sent to customers in China and South Korea, Dior disclosed that the compromised data may include full names, gender, phone numbers, email addresses, postal addresses, purchase history, and shopping preferences. A statement published on the Korean version of Dior’s website confirmed the breach and urged customers to exercise caution against potential phishing attempts.
Chinese customers have also begun receiving official notifications of the data compromise, underscoring the international scale of the incident. Nevertheless, the exact number of affected individuals and the full list of impacted regions have not yet been disclosed. Dior affirms that it is taking steps to notify customers and regulatory bodies in accordance with applicable local laws.
South Korean media reports indicate that Dior may face legal repercussions for failing to promptly alert national regulators. Under local legislation, companies that detect a personal data breach are required to notify the relevant authorities without delay. In Dior’s case, it is alleged that the notifications were not sent to all required entities.
Brand representatives reiterate that the security and confidentiality of client data remain paramount. Dior expresses regret for any inconvenience or concern caused by the breach and urges clients to remain vigilant and report any instances of brand impersonation or suspicious requests for personal information.
Meanwhile, cybersecurity specialists continue their investigation to identify the source of the breach and implement safeguards to prevent similar incidents in the future.