H&M Group: Security Culture: A How-to Guide for Improving Security Culture and Dealing with People Risk in Your Organisation

H&M Group Investigates Alleged Data Breach by ShinyHunters

H&M Group is actively investigating claims of a potential cybersecurity incident after reports surfaced that the financially motivated hacking group ShinyHunters may have targeted the company. In a statement to The Times, an H&M spokesperson acknowledged awareness of the allegations but confirmed no evidence of a compromise in its data environment at this stage. The company emphasized its commitment to system and data security while refraining from further details as the investigation continues.

ShinyHunters, known for deploying phishing schemes and exploiting cloud misconfigurations, has previously targeted high-profile organizations, including a recent breach of the U.S. Department of Homeland Security. The group’s tactics often involve data theft for financial gain, though the full scope and impact of the alleged H&M incident remain unclear.

As of now, H&M has not disclosed whether customer or employee data was affected, nor has it confirmed the attack’s origin or timeline. The investigation is ongoing.

Source: https://www.securitymagazine.com/articles/102636-h-and-m-investigating-possible-data-breach

H&M Group TPRM report: https://www.rankiteo.com/company/hmgroup

"id": "hmg1791815982",
"linkid": "hmgroup",
"type": "Breach",
"date": "10/2026",
"severity": "25",
"impact": "1",
"explanation": "Attack without any consequences"

{'affected_entities': [{'industry': 'Fashion/Apparel',
                        'name': 'H&M Group',
                        'type': 'Retail'}],
 'attack_vector': ['Phishing', 'Cloud Misconfigurations'],
 'description': 'H&M Group is actively investigating claims of a potential '
                'cybersecurity incident after reports surfaced that the '
                'financially motivated hacking group ShinyHunters may have '
                'targeted the company. The company has not found evidence of a '
                'compromise in its data environment as of now, but the '
                'investigation is ongoing.',
 'investigation_status': 'Ongoing',
 'motivation': 'Financial Gain',
 'references': [{'source': 'The Times'}],
 'response': {'communication_strategy': 'Acknowledged allegations but '
                                        'refrained from further details '
                                        'pending investigation'},
 'threat_actor': 'ShinyHunters',
 'title': 'H&M Group Investigates Alleged Data Breach by ShinyHunters',
 'type': 'Data Breach'}