Vishing involved in two of three breaches against Korean subsidiaries of prominent luxury brands impacting more than 5 million customers in total.

CSO Online offers insights into cybersecurity, risk management, and IT leadership, providing articles, reports, and expert analysis to help security professionals navigate the evolving threat landscape and protect their organizations from cyber attacks. By exploring CSO Online's curated content, CISOs, security managers, and IT executives can learn about threat intelligence, security frameworks, and incident response strategies for building resilient cybersecurity programs. Whether you're defending against ransomware, phishing attacks, or insider threats, CSO Online offers resources to strengthen your security posture and safeguard your digital assets.

CSO Online

South Korea's privacy regulator fined Louis Vuitton, Christian Dior, and Tiffany a combined $25 million for failing to implement basic security controls on their SaaS customer management platforms. The breaches, affecting over 5 million customers total, resulted from malware-compromised credentials and vishing attacks. All three companies lacked IP-based access restrictions, strong authentication, and proper monitoring. The regulator emphasized that using SaaS doesn't transfer security responsibility—organizations must enforce least-privilege access, implement IP controls, and deploy strong authentication mechanisms to comply with data protection laws.

South Korea fines Louis Vuitton, Christian Dior, Tiffany $25M for SaaS security failures