Dior Data Breach Investigation

Recently, Dior reported to the Attorney General of California that it had experienced a data breach in which sensitive personal identifiable information in its systems may have been compromised. According to the breach notice, on May 7, 2025, Dior identified a potential cybersecurity incident.¹  As a result, Dior launched an investigation to determine the nature of the incident.

Through its investigation, Dior confirmed that an unauthorized party was able to gain access to a Dior database that contained information about Dior clients on January 26, 2025. ¹ As a result, Dior began a review of the data to determine what information had been impacted as well as identify the specific individuals affected.  The exact type of personal information potentially exposed has not been made publicly available by Dior. However, according to California state reporting guidelines, “personal information” can include the following types of information:

• Name
• Address
• Social Security number
• Date of birth
• Passport number

On July 18, 2025, Dior began mailing data breach notification letters to impacted individuals.  Based on the breach notice sent to California residents, Dior is providing affected individuals with a list of the specific types of sensitive information impacted and complimentary credit monitoring services. A link to the form breach notification letters that Dior filed with the Attorney General of California is below.