Skip to content
H&M Investigates Possible Cyberattack by ShinyHunters

H&M Investigates Possible Cyberattack by ShinyHunters

First seen 12 Oct 2026, 16:34 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 12, 2026 at 17:37 UTC
  • •H&M is investigating claims of a cyberattack by ShinyHunters.
  • •No evidence of a data breach has been confirmed by H&M as of now.
  • •The investigation follows a recent incident involving ASOS, which experienced unauthorized access to customer data.

H&M Group is currently investigating claims of a potential cyberattack by the group ShinyHunters, which follows a recent incident involving ASOS. An H&M spokeswoman stated that they are aware of online claims regarding a limited amount of H&M data potentially being compromised. However, they have found no evidence that their data environment has been breached. ShinyHunters is known for financially motivated attacks, including phishing and exploiting cloud vulnerabilities. The investigation comes after ASOS confirmed unauthorized activity affecting customer data, although payment details were reportedly not compromised. H&M has not confirmed any breach, and the UK’s Information Commissioner’s Office has not received a report regarding this incident as of October 10. The situation raises concerns about risks from compromised employee credentials and third-party services.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-06
ASOS confirms unauthorized activity
ASOS reported unauthorized access to customer data through third-party platforms, but payment details were not compromised.
Theindustry.Fashion
2026-10-09
ShinyHunters leaks data from Salesforce attacks
ShinyHunters launched a data leak site claiming to extort companies affected by Salesforce breaches, including major brands.
BleepingComputer
2026-10-12
H&M issues statement on cyberattack claims
H&M Group stated they are investigating claims of a cyberattack and have found no evidence of a breach.
Securitymagazine

More articles in this cluster (3)

Following this threat?

Track ShinyHunters and ASOS in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

Has H&M confirmed a data breach?
No, H&M has not confirmed any data breach but is investigating claims regarding a potential cyberattack.
What is ShinyHunters known for?
ShinyHunters is a financially motivated cybercriminal group known for phishing and exploiting cloud vulnerabilities.
What should H&M customers do?
Customers should monitor their accounts for any suspicious activity, although no payment details are believed to be compromised.