Chanel Alerts Clients of Third-Party Breach

Chanel disclosed that on July 25 it detected a breach stemming from a third-party service provider (reported as Salesforce) in which limited contact details—name, email, mailing address, and phone number—of a subset of U.S. client care contacts were accessed; affected clients were notified. The report links this event to a wider series of Salesforce-related intrusions that rely on voice phishing and malicious OAuth app authorization to harvest credentials and access data, with multiple major brands targeted and subsequent extortion attempts attributed to actors self-identifying as ShinyHunters.