iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
H&M was investigating online claims of a potential cybersecurity incident as of October 12, 2026. The company said it had found no indication at that point that its data environment was compromised. The reviewed reporting does not confirm that ShinyHunters accessed H&M systems or that customer data was exposed.
What H&M has said
An H&M Group spokesperson told The Times, in a statement reported by The Independent, that the company was aware of online claims about a potential cybersecurity incident involving a “limited scope” of H&M Group data. The spokesperson said H&M was investigating the claims and had “no indication that our data environment has been compromised” at the time.
The spokesperson added that H&M takes potential threats seriously and could not provide further details while its work was ongoing. TheIndustry.fashion separately reported a similar statement: H&M was investigating information about a potential incident and had not found indications that its data environment was compromised.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Has H&M been hacked, and was data stolen?
The reports establish that claims were circulating and that H&M was investigating them. They do not establish that a breach occurred, that ShinyHunters accessed H&M’s systems, or that any data was copied or stolen. H&M’s reference to a “limited scope” describes the claims under investigation; it is not confirmation that data was accessed.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
The company’s statement is an interim status, not a final finding. It says what H&M had found at the time, rather than ruling out a later discovery or confirming the outcome of the investigation.
What information and systems may be affected?
The reviewed reports do not identify affected systems, data categories, the number of people involved, or the geographic scope. They also do not say whether H&M later issued an incident notification. In other words, there is no verified basis in these reports for saying customer names, contact information, passwords, payment details, or employee records were exposed.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
The Independent reported that the UK Information Commissioner’s Office had not received a report as of Monday lunchtime. That is a time-specific detail reported by the outlet, not a later regulator update or proof that no report was filed afterward.
How to read new updates
Because this is an ongoing investigation, later claims should be assessed against the source and date of the information. A claim that data was taken is not the same as confirmation that systems were accessed, and neither alone establishes which people or records were affected.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
- Check whether the information comes from H&M, a regulator, or an independently attributed report.
- Look for a clear distinction between attempted access, confirmed access, and data exfiltration.
- Check whether an update names the affected data, systems, people, and locations rather than using broad terms such as “company data.”
- Confirm that a report concerns H&M itself, not a separate retailer or a third-party service.
ASOS reporting is a separate incident
TheIndustry.fashion also reported that ASOS was investigating unauthorized activity involving third-party platforms used to communicate with customers. ASOS said names, contact details, and certain account information may have been accessed, while payment card details and passwords were not believed to be compromised. It said its website and app remained operational and that it had restricted access to affected notification platforms.
That is separate reporting about ASOS. The available account does not establish a shared intrusion or a connection to the H&M claims.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Why retailer security risks do not prove this incident
Retailers can face risks involving stolen credentials, third-party integrations, and API access. In comments to Total Retail, Filigran CEO and co-founder Samuel Hassine discussed those risks at an industry level. Such commentary can explain general attack paths, but it is not evidence about H&M’s systems or how the claims arose.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesQuick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
