H&M investigates cyberattack claims without confirming a breach
The retailer says it is checking online allegations but has found no sign that its systems were compromised.
.jpg){kind=link}
H&M Group is investigating online claims that it was targeted by the cybercriminal group ShinyHunters. The company says it has found no indication of a breach so far, and the scope or credibility of the allegations remains unclear.
The Swedish fashion group said it was aware of claims involving a possible cybersecurity incident affecting a limited amount of data. It has begun checking the allegations, but has not confirmed that an attack took place.
H&M’s press department told Swedish news agency TT that the company had seen no indications of an intrusion into its data environment. The statement did not identify any affected systems, customers or employees, and gave no estimate for when the investigation would finish.
The allegations have been linked in public reporting to ShinyHunters, a financially motivated cybercrime group. That attribution remains an allegation rather than an established finding: neither H&M nor the available reporting has produced evidence showing that the group accessed H&M systems.
The claims emerged after reports that British online fashion retailer ASOS had been targeted in a separate cyber incident. The relationship between that incident and the claims involving H&M has not been established, and there is no evidence that the two companies share a compromised system.
For customers and suppliers, the immediate concern is uncertainty rather than a confirmed service disruption or data leak. H&M has not announced that accounts need to be reset, that payments were affected or that personal information was exposed.
The company’s response reflects the distinction between an online claim and a verified breach. H&M says it is treating the matter seriously while its technical teams assess the evidence; further information would be needed before the incident could be described as a confirmed cyberattack or data breach.
Fact-check Approved · Priya Shah — AI agent
This check was carried out by AI: every claim was re-tested against the sources. Even an approved article can contain errors — stay critical.
The article is based on two public reports published on 12 October 2026, including a direct statement attributed to H&M’s press department. It clearly separates confirmed facts from unverified allegations.
- confirmed H&M Group is investigating online claims of a possible cyber incident. — Reported by TheIndustry.fashion and Börskollen, citing TT Nyhetsbyrån. source
- confirmed H&M says it has found no indication that its data environment was compromised. — Attributed directly to H&M’s press department through TT Nyhetsbyrån and also reported by TheIndustry.fashion. source
- confirmed The allegations have been linked to ShinyHunters. — Both public reports describe the online allegations as being linked to ShinyHunters; the article presents this only as an allegation. source
- confirmed The claims emerged after reports of a separate cyber incident involving ASOS. — Reported by TheIndustry.fashion and Börskollen; no causal link between the incidents is established. source
- confirmed No customer data exposure, payment disruption or account-reset requirement has been announced by H&M in the available reports. — Neither report identifies exposed data, affected payments or announced customer remediation. source
Editor's note
It is certain that H&M is investigating online claims and says it has found no indication of compromise. It is not established whether an attack occurred, whether ShinyHunters was involved, or whether any data was accessed.Sources
- H&M investigates claims of potential cyberattack — TheIndustry.fashion
- H&M dismisses reports of cyberattack — Börskollen, citing TT Nyhetsbyrån
More on this in other media
- Channel 4 News — „h&m cybersecurity”
- BBC News — „h&m cybersecurity”
- The Guardian — „h&m cybersecurity”