H&M probes claims it was hit by Shinyhunters hackers who previously targeted Asos and Ticketmaster

H&M is investigating claims that the Shinyhunters hacking group broke into its systems last week, shortly after the same gang is suspected of targeting fashion rival Asos. The Swedish retailer — whose brands include Cos, Arket and Monki, with a footprint spanning 4,000 stores across more than 80 markets — says it has found no evidence so far that its data environment has been compromised.

Shinyhunters previously demanded a £400,000 ransom after attacking Ticketmaster in 2024 and has also claimed responsibility for a Jaguar Land Rover breach.

Asos was targeted on 6 October, when hackers impersonated a trusted contact to trick an employee into handing over login credentials, exposing customer names and contact details.

H&M has not informed the UK's Information Commissioner's Office, which must be alerted within 72 hours whenever a breach puts people's rights and freedoms at risk.