H&M Investigates Claims of Cyberattack by Shinyhunters Group

H&M is investigating claims that it was the target of a cyberattack last week by a group known as Shinyhunters. The Swedish fashion giant confirmed it is looking into the potential cybersecurity incident, which follows a similar attack on the online retailer Asos.

Shinyhunters has previously claimed responsibility for a significant cyberattack on Jaguar Land Rover last summer, in conjunction with other hacking groups such as Scattered Spider and Lapsus. The group has also reportedly demanded ransom payments, including approximately £400,000 after an attack on Ticketmaster in 2024.

A spokesperson for H&M Group stated that the company is aware of the online claims concerning a potential cybersecurity incident impacting a limited scope of H&M Group data. "Protecting the security of our systems and data is of utmost importance to us," the spokesperson said.

While the investigation is ongoing, H&M has indicated that there is currently no evidence of its data environment being compromised. "We take any potential threat to our systems and data seriously and as this work is ongoing, we are unable to provide further details at this time," the company added.

The H&M Group operates globally, with approximately 4,000 stores across more than 80 markets. Its portfolio includes various fashion and homeware brands such as Cos, Weekday, & Other Stories, and Arket.