Swedish fashion retailer H&M is investigating allegations that the ShinyHunters hacking group accessed confidential company information, potentially exposing details about its inventory, sales, and supply-chain operations. However, the company has emphasized that its investigation has not uncovered evidence of a compromise.
The allegations surfaced after ShinyHunters claimed to have obtained access to internal databases containing operational records. According to the group, the information includes stock management data, logistics records, sales analytics and technical details about systems supporting retail stores and order fulfillment.
Such information could reveal how H&M manages merchandise distribution, monitors sales and coordinates activities across its international retail network. Nevertheless, the hackers have not provided independently verified evidence establishing that the claimed intrusion occurred.
H&M acknowledged the allegations in a statement reported by The Times, confirming that it was examining claims concerning a potentially limited amount of company data. The retailer said protecting its information and technology infrastructure remained a priority, but it could not provide additional details while the investigation continued.
The company operates approximately 4,000 stores in more than 80 markets. Alongside its main H&M brand, the group owns several other fashion labels, including COS, Arket, Weekday and & Other Stories.
ShinyHunters is a financially motivated cybercriminal operation associated with data theft and extortion. Its members have frequently relied on social engineering techniques, including impersonating corporate IT support personnel to persuade employees to disclose credentials or grant access to business applications.
The group’s latest allegations emerge amid heightened cybersecurity concerns in the fashion industry. British online retailer ASOS recently confirmed unauthorized access to customer information through third-party systems after an attacker obtained employee credentials.
Although the incidents have attracted attention because of their timing, no confirmed technical connection between the ASOS breach and the alleged H&M intrusion has been established.
ShinyHunters has also faced increased law enforcement scrutiny following recent arrests of suspected associates and investigations into attacks targeting major organizations.
For H&M, the immediate question remains whether the attackers genuinely obtained internal information or are making unsupported claims. The company has not confirmed customer data exposure, operational disruption, or unauthorized access to its systems.