迪奥中国客户数据遭未授权访问 事发五天后才紧急短信预警

Core Points - Dior experienced a data breach on May 7, 2025, where unauthorized access to its database led to the leakage of customer personal information, with a five-day delay in notifying affected customers [1][4] - The leaked data includes names, gender, phone numbers, email addresses, mailing addresses, and purchase amounts/preferences, while financial information such as bank account and credit card details remained unaffected [3][4] - The incident has raised concerns among consumers about potential targeted scams, as the leaked data could allow fraudsters to identify high-net-worth individuals for more convincing scams [5] Company Response - Dior confirmed the authenticity of the incident and stated that it has engaged a top cybersecurity team to investigate and enhance its information security measures [4] - The company has not disclosed the number of affected customers or the specific cause of the breach, and it remains unclear whether regulatory authorities are involved in the investigation [5] Regulatory and Compliance Issues - The delay in notifying customers has led to questions regarding compliance with China's Personal Information Protection Law, which mandates immediate remedial actions and customer notifications following a data breach [5]