Threat Intelligence
H&M Investigates Claims of Cyberattack Linked to ASOS Hackers
H&M is looking into claims that it was targeted by the same hackers behind the ASOS cyberattack. The company says it has found no evidence of a data breach so far.
Ross Grant2 min read
The short version
H&M is checking claims that hackers tried to break into its systems, possibly the same group that attacked ASOS. So far, H&M says there is no sign that any data was stolen. Only one news outlet has reported this story. Customers do not need to take action at this time.
What happened?
H&M is investigating claims that it was targeted by the same hackers behind the ASOS cyberattack. The company says it is assessing the situation and has found no evidence of a data breach so far. Only The Times has reported on these claims.
What is known so far
H&M, the Swedish clothing retailer, is investigating claims that it was targeted by the same criminal group that attacked ASOS. The Times reports that the group in question is ShinyHunters, a well-known name in cybercrime circles. At this stage, H&M says it is assessing the claims and has not found any evidence that its data has been compromised.The Times (opens in a new tab)
Who are ShinyHunters?
ShinyHunters is a cybercriminal group that has previously claimed responsibility for attacks on major companies, including Google, Microsoft and Ticketmaster. The group is known for targeting large organisations and attempting to steal and sell sensitive data. Their tactics often involve breaching company systems and then offering stolen data for sale on cybercrime forums.
What has H&M said?
According to The Times, H&M is taking the claims seriously and is in the process of verifying them. The company has stated that, so far, there is no indication that any of its data has been accessed or stolen. This means that, at this point, there is no confirmed data breach affecting H&M customers or staff.
What should customers do?
Since there is no evidence of a breach at H&M, customers do not need to take immediate action. However, it is always wise to use strong, unique passwords for online accounts and to be cautious of phishing emails or messages claiming to be from H&M. If H&M confirms any breach in the future, affected customers should follow the company’s official guidance.
What happens next?
H&M will continue its investigation into the claims. If any evidence of a breach is found, the company may need to notify regulators and affected customers, depending on the laws in the countries where it operates. Under regulations such as the EU GDPR, companies can face significant fines if they fail to protect customer data or to report breaches promptly. For now, the situation remains under review, and there is no confirmed impact on H&M or its customers.
Uncertainties
At present, only The Times has reported on these claims, and there is no confirmation from H&M or any official agency. It is not clear how the hackers may have targeted H&M or what information, if any, was at risk. Readers should watch for updates from H&M or official sources for further information.
Claimed vs confirmed
- Unconfirmed
H&M was targeted by the same hackers behind the ASOS cyberattack.
Reported by The Times; H&M is investigating but has found no evidence of a breach.
The impact
- Money
- If a breach is confirmed, H&M could face regulatory fines under laws like the EU GDPR, which can reach up to €20 million or 4% of annual turnover.
- Reputation
- Even unconfirmed claims of a cyberattack can affect customer trust and public perception of H&M's security.
- Customers
- At this time, there is no evidence that customer data has been compromised. Customers do not need to take action unless H&M confirms a breach.
Why it matters
If confirmed, a breach at H&M could put customer and staff data at risk. Large companies like H&M hold sensitive information that can be valuable to criminals. Even unconfirmed claims can affect trust and require companies to investigate and respond.
How does it work?
ShinyHunters, the group reportedly behind the attack, is known for breaching company systems to steal data, which they then offer for sale on cybercrime forums. The specific method used against H&M, if any, has not been detailed.
Key points
- H&M is investigating claims of a cyberattack linked to the ASOS hackers.
- So far, H&M says there is no evidence of a data breach.
- Only one news outlet has reported these claims.
- ShinyHunters is known for targeting large companies and selling stolen data.
- Customers do not need to take action unless H&M confirms a breach.
Sources
The Times
Reference
