Kering Group's Luxury Data Heist (September 2025):
Cybercriminals breached the parent company of high-end brands like Gucci and Balenciaga, stealing customer payment details and personal info from millions. The entry point? A vulnerable third-party vendor—proving that outsourcing doesn't mean offloading risk. In mere hours, attackers siphoned data through overlooked API weaknesses, turning shopper loyalty into a thief's jackpot.