At TecnetOne, we keep you informed about the latest cyberattacks affecting well-known brands—not just so you stay updated, but so you can learn from each case and strengthen your own security.
This time, the victims are Chanel and Pandora, two giants in fashion and jewelry that have suffered security incidents involving customer data theft. While both attacks have already been resolved, they serve as another reminder that no company, no matter how prestigious, is off cybercriminals’ radar.
What happened in each case?
The Pandora Cyberattack
The Danish jewelry company notified customers of unauthorized access to its system, during which names and email addresses were copied.
The company emphasized that:
- No passwords were compromised.
- No credit card or similar sensitive data was leaked.
- To date, there is no evidence that the stolen data has been published or shared.
The Chanel Cyberattack
On July 25, Chanel informed customers of an incident affecting a U.S.-based database hosted by a third-party provider.
According to the company:
- The attack did not impact business operations.
- The issue has been contained and additional protective measures are being implemented.
A relentless trend
These incidents join a growing list of fashion brands affected in 2025, including Harrods, Adidas, Dior, Marks & Spencer, Co-op Group, The North Face, and Cartier.
In June alone, The North Face and Cartier suffered cyberattacks, though both confirmed that no customer financial data was accessed.
The reality is that the fashion and luxury sector handles highly valuable databases containing personal and contact information for millions of customers—making it an attractive target for attackers seeking to steal data for fraud or extortion.
You might also be interested in: The Biggest Cyberattack on Brazil's Financial System
Chanel and Pandora’s recommendations for customers
Both companies advised customers to be extra cautious against potential fraud attempts:
- Do not open links or download files from unknown senders.
- Be suspicious of calls, emails, or messages requesting personal information.
- Watch for unusual activity in accounts or email.
A growing problem: The cost of cyberattacks
According to McKinsey data, the global economic impact of cyberattacks in 2025 will reach $10.5 trillion—300% higher than ten years ago.
This figure includes not only the technical cost of resolving incidents but also losses from operational disruptions, reputational damage, and regulatory fines.
What this means for your business
Cases like Chanel and Pandora’s are a warning sign for any business, even outside the fashion industry. These attacks show that:
- Any company managing personal data is at risk.
- Third-party providers can be a weak link if they lack robust security measures.
- Quick response and clear communication with customers are key to minimizing reputational damage.
Learn more: Data Breach at Thermomix Exposes User Information
How you can protect yourself
Here are some key measures to reduce the risk of your business becoming the next victim:
Audit your vendors
Ensure they meet security and data encryption standards.
Implement multi-factor authentication (MFA)
Adds an extra layer of protection for internal and external access.
Train your team
Social engineering remains one of attackers’ main entry points.
Monitor network activity
Early detection and response systems can stop an attack before serious damage occurs.
Encrypt sensitive data
Even if attackers gain access, they can’t use the data without the decryption key.
Conclusion: Learning from attacks to avoid repeating them
The incidents at Chanel and Pandora confirm that cybersecurity must be a strategic priority, not an afterthought. The best defense is prevention, which requires technology, solid processes, and trained personnel.
At TecnetOne, we can help you:
- Assess vulnerabilities in your infrastructure and that of your providers.
- Implement advanced detection and response solutions.
- Design an incident response plan to minimize impact when the unexpected happens.
The question is not if your company will be targeted, but when. Preparing today can save you millions and protect your reputation tomorrow.
