Giglio Luxury Retailer Breach Exposes 1 Million Customer Emails

HEROIC analysts identified a data breach affecting Giglio, an online fashion retailer, exposing 1,034,237 records as of August 9, 2025. The exposed data includes email addresses, full names, and phone numbers. If you have ever shopped with this retailer, the only way to know for certain if your information was included is to scan your email.

Why This Data Is Useful to Scammers

A real name, email address, and phone number give a scammer enough to send a convincing message that looks like it comes from a retailer a person has actually shopped with. These messages often reference a fake order, a delivery problem, or a payment issue, using a real name and phone number to make the request feel legitimate.

Account Details Involved In This Exposure

• Email addresses
• First names
• Last names
• Phone numbers

Why This Is Worth Taking Seriously

Phishing and smishing messages themed around retail purchases are especially effective when they include a real name and phone number, since both details make a fake delivery or order notification feel believable. Clicking a link in one of these messages can lead to a fake payment page designed to capture financial details.

How This Kind Of Exposure Happens

In an incident like this one, records are taken directly from a retailer's own systems rather than gathered one at a time. HEROIC analysts found this data circulating after it had already been pulled from internal records, reflecting exactly what the company stored about its customers.

Was Your Giglio Account Affected?

The fastest way to check is to scan your email for a match. If your details appear, be cautious of unexpected order confirmations, delivery notices, or payment requests that use your real name or phone number, and go directly to the retailer's official site rather than clicking a link in the message. This applies to personal and work email addresses alike.