Prepared: 2026-05-01 | Audit Phase: V-DIG | Parent Entity: LVMH Moët Hennessy Louis Vuitton SE
The most significant documented link between Christian Dior SE’s ownership structure and Israeli technology concerns Wiz, the Israeli-founded cloud-native application protection platform (CNAPP). Aglaé Ventures — the investment vehicle of Bernard Arnault, who serves simultaneously as Chairman and CEO of both LVMH and Christian Dior SE — participated in a funding round for Wiz in 2023.12 This relationship sits at the level of Arnault’s personal and family-office capital deployment, not a corporate procurement or licensing contract entered into by Dior SE or LVMH as an operating enterprise.
Wiz was co-founded by Assaf Rappaport, Yinon Costica, Ami Luttwak, and Roy Reznik, all publicly documented alumni of Israeli military intelligence Unit 8200, who previously co-founded Adallom (acquired by Microsoft in 2015) and subsequently led Microsoft Azure’s Cloud Security Group before departing to found Wiz.13 The firm’s product line covers cloud workload protection, cloud security posture management (CSPM), and data security posture management (DSPM) across multi-cloud environments.
No public evidence has been identified of a direct licensing, subscription, or enterprise services contract between Christian Dior SE or LVMH and Wiz. The relationship is one of minority venture-capital investment by the group’s ultimate controlling shareholder.12 Arnault’s family holding structure — Financière Agache, which controls both LVMH and Christian Dior SE — provides the vehicle through which Aglaé Ventures operates.29
The Google–Wiz acquisition (reported at $32 billion, with European Commission review underway as of early 2025 reporting) is noted in the ecosystem context.2 Final closure status should be confirmed against EC and SEC primary filings.
Check Point Software Technologies issued external consumer-facing phishing-awareness commentary following the May 2025 Dior data breach.912 This constitutes independent threat-intelligence publication by a third party, not evidence of a vendor relationship. Check Point and Wiz announced a strategic partnership in 2024 covering end-to-end cloud security,24 but Dior or LVMH are not documented parties to that arrangement.
CyberArk and SentinelOne announced a joint endpoint and identity security partnership in 2024,26 and CyberArk separately entered a cloud-identity partnership with Wiz in 2024.25 None of these inter-vendor agreements document Dior or LVMH as a customer, user, or referenced deployment site.
For Verint, Nice Systems, Palo Alto Networks, and Claroty: no public evidence of direct licensing, subscription, integration, or services relationships with Christian Dior SE or LVMH has been identified in corporate filings, vendor press releases, procurement records, or credible trade reporting.
Publicis Sapient is publicly documented as a digital transformation integrator for Dior and the broader LVMH portfolio, engaged on unified commerce experiences and immersive retail activations.16 Publicis Sapient maintains global delivery operations including Israel-based resources, but no public evidence identifies Publicis Sapient as having mandated, procured, or deployed Israeli-origin cybersecurity or analytics products specifically within its Dior or LVMH engagement scope. No public evidence identified that these engagements introduced Israeli-origin technology products.
LVMH operates a structured startup co-development pipeline — La Maison des Startups (Station F, Paris)14 and the annual LVMH Innovation Award15 — through which technology startups are onboarded as commercial partners for Maisons including Dior. This pipeline has produced at least two confirmed Israeli-origin technology vendor relationships (detailed under Sections 2 and 6).
A proposed class-action was filed against Christian Dior Inc. in the United States alleging that the company unlawfully collected Illinois residents’ biometric information through a virtual try-on feature on its e-commerce website, in violation of the Illinois Biometric Information Privacy Act (BIPA).7 The technology vendor powering the virtual try-on feature is not named in the public case record. The ClassAction.org case listing records the case as dismissed.7 No public evidence connects the underlying try-on technology to an Israeli-origin vendor.
Kahoona, an Israel-headquartered AI behavioral analytics company, is a confirmed Dior technology partner. Kahoona received the “Best Business Prize” at the 2025 LVMH Innovation Award ceremony, explicitly recognized for its collaboration with Christian Dior.430
Kahoona’s published case studies document commercially attributed performance improvements from a “global luxury fashion leader” deployment — consistent with the LVMH award citation confirming the Dior relationship — including: a 24.2% improvement in click-through rate, 19.1% increase in pages per session, 12.8% growth in average order value, and 166% more new customer acquisitions.56
Kahoona’s technology operates by ingesting in-page micro-interactions from unauthenticated website visitors — including mouse movement patterns, scroll velocity, click cadence, and hesitation intervals — and generating real-time predictive behavioral segmentation without reliance on third-party cookies or persistent login identity.56 This is a confirmed live commercial deployment on Dior’s digital properties, not a pilot or inferred relationship.
No public evidence has been identified that Kahoona’s platform, as deployed by Dior, has been used for workforce surveillance, physical store monitoring, social media monitoring, or any application beyond e-commerce conversion optimization.
Trigo (Israeli computer vision, frictionless checkout), AnyVision/Oosto (Israeli facial recognition), BriefCam (Israeli video analytics), and Trax Retail (Israeli shelf-intelligence and image recognition): no public evidence of direct deployment of any of these Israeli-origin surveillance or retail-intelligence vendors within Dior or LVMH boutiques has been identified. Claims in prior AI research that Trax “serves brands like Dior,” sourced from a comparison aggregator page rather than any primary corporate or vendor disclosure, are assessed as insufficiently verified.32
The May 2025 Dior data breach is confirmed by multiple independent sources.891012 The breach involved unauthorized access to a customer database and exposed the personal data of customers principally in Asia, with South Korea and China explicitly confirmed as affected markets.8911 Breach analysis sources cite AWS S3 as the storage environment involved,1012 constituting the primary public confirmation of Dior’s use of AWS for customer data storage operations.
Technically granular forensic details appearing in some secondary analyses — including specific IP attribution, script filenames, IAM policy configurations, and TLS cipher specifications — are not corroborated by any primary source (vendor disclosure, regulatory notice, or credible investigative journalism) and should be treated as unverified pending primary confirmation.
Chinese data protection authorities initiated a regulatory investigation into Dior’s Shanghai subsidiary over alleged violations of the Personal Information Protection Law (PIPL), including cross-border personal data transfers conducted without adequate legal basis and deficiencies in encryption safeguards.11 China Briefing’s reporting on this investigation is the primary English-language source of record.11 The final penalty amount has not been confirmed in a primary regulatory notice available in public sources as of memo date.
A South Korean Personal Information Protection Commission (PIPC) enforcement action involving Dior Couture, Louis Vuitton, and Tiffany & Co., with a cited penalty of KRW 36.033 billion (~$25M USD), is referenced in the prior research but is not independently confirmed in a primary PIPC regulatory decision notice within available sources. This claim requires verification against PIPC official records before it can be treated as established fact.
Project Nimbus is a confirmed $1.2 billion contract between the Israeli government and Amazon Web Services and Google Cloud to construct sovereign cloud infrastructure for the Israeli government and military.171821 AWS opened its Israel (Tel Aviv) Region with three availability zones in 2023.1920
No public evidence has been identified that Christian Dior SE or LVMH routes any workloads to the AWS Israel (Tel Aviv) region specifically, holds any contractual relationship with the Nimbus programme, or provides services marketed for Israeli state digital sovereignty or military data resilience. The relationship between Dior’s documented AWS usage and Project Nimbus is structural and indirect: Dior’s global AWS spend contributes to Amazon’s corporate revenues as a company that also operates the Nimbus contract. No operational overlap has been publicly documented.
No public evidence has been identified that Christian Dior SE or LVMH operates, leases, or co-locates proprietary data centre infrastructure within Israel. The group’s confirmed in-country presence is limited to commercial retail.
No public evidence identified of any contract, partnership, memorandum of understanding, or services agreement between Christian Dior SE, LVMH, or any confirmed subsidiary and the Israeli Ministry of Defence, Israel Defense Forces (IDF), or Israeli intelligence agencies (Mossad, Shin Bet, Unit 8200 as an institutional body).
No public evidence identified that any commercially deployed Dior or LVMH technology — including the confirmed Kahoona behavioral analytics deployment — has been reported, documented, or alleged to have been repurposed or made available for military, intelligence, or law-enforcement surveillance operations within Israel or the Occupied Palestinian Territory.
No public evidence identified. Christian Dior SE and LVMH are luxury goods, fashion, and retail conglomerates. No involvement in offensive cyber capability development, digital weapons programs, or state-level signals intelligence infrastructure has been identified.
No public evidence identified of any provision of AI systems, machine learning models, computer vision infrastructure, or autonomous decision-support technology by Christian Dior SE or LVMH to Israeli state, military, or security entities.
The confirmed AI deployment footprint at Dior includes:
No public evidence identified that Dior’s or LVMH’s AI or ML models have been trained on surveillance-derived datasets, occupied-territory data, or data originating from Israeli state or military operations. Where Israeli-origin startup technologies (Kahoona, Apply Design) are refined against LVMH/Dior proprietary commercial data (e-commerce behavioral data, product imagery), this is documented in a commercial context exclusively.
No public evidence identified.
No public evidence identified that Christian Dior SE or LVMH operates R&D facilities, engineering offices, innovation labs, or technical centres within Israel. The group’s confirmed in-country footprint is retail-only.
Dior operates confirmed physical retail boutiques in Israel:
diorboutique-il.com with Hebrew-language interface and local boutique listings.23No corporate acquisitions of Israeli technology companies by Dior SE or LVMH as the direct acquiring entity have been identified.
No public evidence identified of patent portfolios, co-invention filings, licensing agreements, or joint research and development arrangements between Dior or LVMH and Israeli universities (Technion, Hebrew University, Weizmann Institute, Ben-Gurion University) or Israeli state research bodies.
LSESU Palestine Society — Stakes in Settler Colonialism (2025)31: This document, published by the London School of Economics Students’ Union Palestine Society, addresses LVMH and Arnault in the context of the Aglaé Ventures investment in Wiz. It should be read as an advocacy document rather than a peer-reviewed academic or independent NGO report. Its factual claims regarding the Wiz investment align with independently confirmable press coverage.12 No UN Special Rapporteur reports, peer-reviewed academic studies, or major human rights organization publications specifically auditing Dior’s or LVMH’s technology relationships with Israeli state entities have been identified in available sources.
No major BDS organization has published a formal, structured campaign targeting Christian Dior SE or LVMH specifically on grounds of Israeli technology provision, state infrastructure participation, or military-relevant technology as of memo date. Individual activist references are consistent with the LSESU document31 but do not constitute an organized cross-organizational campaign.
Illinois BIPA class action (virtual try-on feature): Filed against Christian Dior Inc. alleging unlawful collection of biometric identifiers via e-commerce virtual try-on tool, in violation of BIPA.7 Case recorded as dismissed.7 No Israeli-origin vendor is identified in the public case record as the technology provider.
Chinese PIPL investigation: Regulatory probe into Dior’s Shanghai subsidiary confirmed by China Briefing11 for alleged violations including unlawful cross-border data transfers and inadequate data protection safeguards. Final penalty quantum not confirmed in a primary regulatory notice available in public sources.
South Korean PIPC enforcement: Cited penalty of KRW 36.033 billion (~$25M USD) attributed jointly to Dior Couture, Louis Vuitton, and Tiffany & Co. Not independently confirmed in a primary PIPC decision document available in public sources. Treat as unverified pending primary source confirmation.
May 2025 data breach — multi-jurisdictional regulatory exposure: The confirmed May 2025 breach of Dior customer data891012 — affecting customers in South Korea and China among others — has generated active regulatory exposure across multiple data protection regimes simultaneously. Investigations or enforcement outcomes from PIPC (South Korea), CAC/MIIT (China), and potentially CNIL (France, as Dior SE’s home regulator) have not yet been resolved in available public records.
No export control actions, sanctions investigations, or regulatory inquiries specifically related to Dior or LVMH technology sales or services to Israeli state entities have been identified.
https://www.timesofisrael.com/luxury-goods-magnate-bernard-arnault-invests-in-israeli-cybersecurity-firm-wiz/ ↩↩↩↩↩
https://observer.com/2024/08/lvmh-bernard-arnault-ai-startup-investment/ ↩↩↩↩↩
https://www.timesofisrael.com/from-waze-to-wiz-how-google-learned-to-love-israeli-tech/ ↩
https://www.lvmh.com/en/news-lvmh/lvmh-recognizes-three-tech-partners-for-exceptional-collaborations-with-its-maisons-at-2025-lvmh-innovation-award-ceremony ↩↩↩
https://www.kahoona.io/case-studies/premium-user-conversion-with-ai-predictive-segments ↩↩↩
https://www.kahoona.io/case-studies/global-luxury-fashion-leader ↩↩↩
https://www.classaction.org/news/dior-collected-illinois-residents-biometric-info-through-try-online-tool-lawsuit-says ↩↩↩↩
https://www.prnewswire.com/news-releases/privacy-alert-house-of-dior-under-investigation-for-data-breach-of-customer-records-302511310.html ↩↩↩
https://www.cityam.com/dior-latest-retailer-to-be-targeted-by-cyber-attack/ ↩↩↩↩
https://www.sangfor.com/blog/cybersecurity/cyberattack-dior-2025-data-breach ↩↩↩
https://www.china-briefing.com/news/diors-pipl-violations-china-key-lessons/ ↩↩↩↩
https://www.lvmh.com/en/news-lvmh/fancytech-wins-2024-lvmh-innovation-award-grand-prize-at-viva-technology ↩
https://www.lvmh.com/en/startups-tech-partners/la-maison-des-startups-lvmh ↩↩
https://www.lvmh.com/en/commitment-in-action/for-people/lvmh-innovation-award ↩↩
https://www.publicissapient.com/industries/consumer-products/luxury-transformation ↩
https://en.wikipedia.org/wiki/Project_Nimbus ↩
https://www.972mag.com/project-nimbus-contract-google-amazon-israel/ ↩
https://aws.amazon.com/blogs/aws/now-open-aws-israel-tel-aviv-region/ ↩
https://aws.amazon.com/local/israel/ ↩
https://cloud.google.com/blog/topics/inside-google-cloud/google-cloud-selected-to-provide-cloud-services-to-the-state-of-israel ↩
https://www.tlvmall.com/en-US/stores/dior1 ↩
https://www.checkpoint.com/press-releases/check-point-software-technologies-and-wiz-enter-strategic-partnership-to-deliver-end-to-end-cloud-security/ ↩
https://www.cyberark.com/press/cyberark-and-wiz-team-up-to-provide-complete-visibility-and-control-for-cloud-created-identities/ ↩
https://www.cyberark.com/press/cyberark-and-sentinelone-team-up-to-enable-step-change-in-endpoint-and-identity-security/ ↩
https://www.bleepingcomputer.com/news/security/salesforce-refuses-to-pay-ransom-over-widespread-data-theft-attacks/ ↩
https://www.lvmh.com/en/news-lvmh/meet-the-18-finalists-of-the-2023-lvmh-innovation-award ↩↩
https://www.luxurytribune.com/en/lvmh-at-vivatech-three-startups-receive-awards ↩↩
https://lsepalestine.github.io/documents/LSESUPALESTINE-Stakes-in-Settler-Colonialism-2025-Web.pdf ↩↩
https://retailtechinnovationhub.com/home/2025/12/17/rtih-ai-in-retail-awards-physical-stores-category-finalists-announced-including-trigo-and-sensei ↩
