Dear Customer,
you are receiving this message because your email address is subscribed to the LUISAVIAROMA newsletter.
What happened
Between July 17 and July 27, 2026, while our platforms were being migrated, unauthorized parties obtained credentials that give access to some of our systems, including the platform we use to send our newsletter. These were not your credentials: no password or account of yours is involved. Those credentials were used, without authorization, to extract some of the data held in that platform.
What data is involved
In your case, the information involved is limited to your email address, an internal subscription identifier, and the status of your newsletter subscription. Nothing else: no name or surname, no phone number, no address, no payment information, no purchase information. If you have never purchased from us, this is all the information we held about you.
What this means for you
The practical risk is fraudulent email reaching the address involved. Three rules cover the situation.
• Do not open links contained in emails or text messages. Reach our site by typing the address yourself. This applies to any message that appears to come from us, including this one.
• LUISAVIAROMA will never ask you for a payment card number, a security code, a password, or a code received by text message.
• A message announcing a refund, a prize, or a payment to collect and asking you to enter your details is not from us. Treat it as fraud.
What we have done
The credentials involved have been revoked, and access to the systems concerned has been reset. An independent external team is reconstructing the details of what happened, and every further update is published at https://www.luisaviaroma.com/it/security-incidents/information .
We have informed the Italian Data Protection Authority.
For any question, to report a suspicious message, or to exercise your rights on personal data: [email protected]
Our Data Protection Officer is available at [email protected].
Kind regards,
The LuisaViaRoma Team
