Pandora Jewellery Hit by Cyberattack, Customer Data Compromised

Pandora, the world-renowned Danish jewelry retailer, recently suffered a major cybersecurity incident involving unauthorized access to customer information through a third-party vendor platform.

The company confirmed the cyberattack was promptly identified and contained, with immediate security reinforcements implemented.

Official communications sent to customers, particularly in Italy, revealed the breach involved unauthorized access to an external supplier’s platform.

Pandora stated the attack has been “temporarily blocked” and security systems have been significantly strengthened following the incident.

Compromised Information

The cyberattack specifically targeted customer contact details, including names, phone numbers, and email addresses. Pandora assured customers that sensitive financial data such as passwords, credit card information, and other confidential details were not compromised during the breach.

Following thorough investigations, the company stated that “at the current state, there is no evidence that the data has been disseminated or published.” However, Pandora continues monitoring the situation with heightened vigilance.

Pandora is urging all customers to exercise extreme caution regarding suspicious communications.

The company specifically warns about potential phishing attempts that may appear associated with Pandora, advising customers against clicking links or downloading attachments from unknown or suspicious sources.

This guidance reflects growing concerns about secondary attacks following major data breaches, where cybercriminals exploit compromised contact information to target victims through fraudulent communications.

Industry experts are investigating possible connections between the Pandora incident and recent cyberattacks targeting Salesforce, a major customer relationship management platform used by numerous multinational corporations.

While Pandora hasn’t explicitly confirmed this connection, the timing and attack nature suggest potential links to broader supply chain vulnerabilities.

The Pandora breach underscores increasing cyberattack frequency and sophistication targeting major retailers, particularly multinational companies with extensive customer databases.

Security analysts note such incidents have become increasingly common, with attackers focusing on third-party vendor platforms as entry points into larger corporate networks.

The jewelry industry, like many retail sectors, has become a prime target for cybercriminals seeking valuable customer data for identity theft, fraud, and other malicious activities.

Pandora emphasized that customer privacy protection remains their highest priority and continues collaborating with cybersecurity experts to prevent future incidents.

The company expects to provide additional updates as investigations progress and may expand customer notifications to other regions as the breach’s full scope becomes clearer.

Customers are encouraged to monitor their accounts closely and report suspicious activity to both Pandora and relevant authorities.

The Ultimate SOC-as-a-Service Pricing Guide for 2025– Download for Free