Louis Vuitton, Dior, and Tiffany fined $25 million over data breaches

South Korea’s data protection agency fined Louis Vuitton, Dior, and Tiffany a combined $25M after breaches of a cloud-based customer management SaaS exposed personal data for roughly 5.5 million customers; attackers used malware, phishing and voice-phishing against customer-service employees and failed access controls, with investigators linking the activity to the ShinyHunters group.