Luxottica, an eyewear company based in Italy, has suffered a cyberattack that resulted in the closure of its stores in Italy and China. Luxottica is the world's largest eyewear company, employing over 80,000 people and generating approximately $9.5 billion in revenue in 2019. The company's portfolio includes well-known eyewear brands including Ray-Ban, Oakley, Oliver Peoples, Ferrari, Michael Kors, Bulgari, Armani, Prada, Chanel and Coach. In addition, the company has 7,000 retail stores, such as Hut, Pearle Vision or LensCrafters.
Luxottica made 75 million pairs of glasses in 2019, including Prada, Tiffany & Co, Coach, Versace, Bulgari, Chanel, Dolce & Gabbana, Ray-Ban and many more. The company has dominated the eyewear market from production to distribution.
In addition to the company's 7,000 retail stores and 10 manufacturing facilities, it has also purchased some of the eyewear brands it sells, including Ray-Ban, which it bought in 1999, and Oakley, which it bought in 2007.
On Friday afternoon, there were multiple reports that the Ray-Ban, Sunglass Hut, LensCrafters, EyeMed and Pearle Vision were down, raising suspicions that a breach.
Additionally, Luxottica's portals one.luxotrica.com and universiti.luxottica.com are currently displaying messagesto inform the public that the sites are under maintenance.
Italian media reported that the IT systems at Luxottica's offices in Agordo and Sedico, Italy, suffered a "computer system failure." As employees were unable to work, they were told to go home. Later, sources confirmed to Italian media outlet Ansa that the company's employees had returned home due to serious problems with the company's IT systems.
Additionally, Cybersecurity Bad Packets told BleepingComputer that Luxottica had a Citrix ADX control device that was vulnerable to a critical vulnerability identified as CVE-2019-19781 in devices . This vulnerability is popular with ransomware gangs. If hackers exploit this vulnerability, they gain access to a network, as well as credentials, which they can use to further spread their attack across the network.
It is worth mentioning at this point that a recent ransomware attack on a German hospital that led to the death of a patient was carried out by hackers who exploited the same vulnerability to gain access to the network.
While there was no official announcement regarding these outages, media reports indicate that Luxottica suffered a cyberattack likely caused by ransomware.
