Observed Signal · Oct 13, 2026 · Policy Update · Source: Retail-News · Impact: 2/5 · Sentiment: Negative
H&M investigates potential cyberattack amid ShinyHunters claims
Swedish fashion retailer H&M has launched an investigation into potential cyberattack claims circulated by the hacker group ShinyHunters. The company stated that it has found no evidence of unauthorized access to its data environment so far. The claims follow a confirmed cyber incident at online fashion retailer Asos. While there is speculation that the same or linked actors may be behind both incidents, no concrete connection has been established. H&M emphasized that the allegations are not independently confirmed, and no successful attack or data theft has been proven. The company operates a complex IT infrastructure connecting online and physical retail, making cybersecurity a critical concern. Should a data breach be confirmed, statutory notification obligations could arise. The investigation is ongoing, and the outcome remains pending.
Cyberattacks on major retailers like H&M and Asos highlight growing security risks in e-commerce, affecting customer data and trust, which is relevant for AdTech and digital advertising ecosystems.
Track H&M Group Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- H&M investigates potential cyberattack claims by hacker group ShinyHunters.
- H&M states no evidence of unauthorized access to its data environment so far.
- The investigation follows a confirmed cyber incident at online retailer Asos.
- No confirmed link between the incidents or actors has been established.
- The company operates brands including COS, Arket, Weekday, & Other Stories and H&M Home.
Connected Companies & Entities
2 Entities mapped“The Swedish fashion retailer H&M is investigating potential cyberattack claims.”
“The investigations at H&M follow a confirmed cyber incident at British online fashion retailer Asos.”
Ontology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
Asos confirms data breach after rogue app notification
UK fashion retailer Asos has confirmed a data breach involving customers' personal information. Hackers broke into a third-party platform hosting data used for customer communications, stealing names, contact information, home addresses, phone numbers, email addresses, and customer profile notes including search queries. The hackers, calling themselves Xuanye Group, sent an unauthorized push notification through Asos' own app, referencing the compromise of data hosted on Snowflake, a cloud data platform. The notification pressured the company to engage or risk a leak. The attackers reportedly gained access by impersonating a trusted contact to obtain login credentials. Snowflake said its own systems were not breached. Asos has 17 million customers. The incident follows a similar breach at fintech firm Betterment earlier in the year.
Cyberattack on De Bijenkorf Logistics Partner Disrupts Operations
A cyberattack on an external logistics partner has significantly disrupted operations at Dutch department store chain De Bijenkorf, which is part of the Selfridges Group. Online order fulfillment, returns and refunds have been delayed while stores, the webshop and the mobile app remain operational. Retail Detail reported that unauthorized actors accessed parts of the logistics provider's IT systems; De Bijenkorf has secured affected systems, engaged external cybersecurity and forensic experts, notified affected customers and reported the incident to the data protection authority. It remains unclear whether personal customer data was exfiltrated. The incident highlights growing supply‑chain cybersecurity risks for retailers and the need to include external partners in security strategies and contingency planning.
Series of Cyberattacks Hits European Retailers
A wave of cyberattacks has affected several European retailers, highlighting growing risks in digitally connected supply chains. Reported incidents include logistics disruptions at Dutch department store De Bijenkorf after an attack on an external logistics partner; a data breach at French group Intermarché affecting about 300,000 Click-&-Collect users (names, emails and contact details exposed; payment data and passwords reportedly not affected); and a compromise at Polish convenience chain Żabka via a third-party service account, giving attackers access to internal systems while store operations and payment systems remained functional. The cases underscore an increase in supply-chain attacks that exploit third-party vendors to bypass core defenses, prompting calls for broader security strategies across retailers and their supplier ecosystems.
Receive all future signals for H&M Group & competitors in your briefing
Never miss material M&A deals, leadership changes, account wins, or product rollouts. Polaris7 monitors 20,000+ primary sources 24/7, delivering verified telemetry directly into your executive briefing.