South Korea's privacy watchdog announced on Thursday that it has imposed fines totaling 36 billion won (approximately $24.9 million) on the local subsidiaries of luxury brands including Louis Vuitton, Dior, and Tiffany for leaking customer information.
The Personal Information Protection Commission made the decision during a plenary session the previous day. The highest penalty among the three companies was levied against Louis Vuitton Korea, fined 21.4 billion won for a data breach affecting approximately 3.6 million customers.
The regulator stated that external attackers infiltrated employee devices on three separate occasions, stealing personal information such as usernames, phone numbers, and dates of birth. It was noted that the company had inadequate security measures for remote access.
Meanwhile, Dior Korea and Tiffany Korea were fined 12.2 billion won and 2.4 billion won, respectively. These penalties were issued because employees at these companies were deceived into granting malicious actors access to internal systems, leading to data leaks.
According to the regulator, the breach at Dior compromised data of about 1.95 million users, and the company only became aware of the incident three months after it occurred. The incident at Tiffany involved the personal information of approximately 4,600 users.
Comments