After Asos: H&M checks reports of cyberattack, Whistles owner TFG confirms incident
A hacker group claims to have taken data from H&M – the group is investigating. At TFG London, owner of Whistles, Phase Eight and Hobbs, online sales are paused for now.
Symbolic image · Photo: bfishadow / Wikimedia Commons, CC BY 2.0 (cropped and resized)
Swedish fashion group H&M is investigating reports of a possible cyberattack. According to Cybernews, the group Shinyhunters claims to have accessed databases with inventory, logistics and sales data as well as details of the infrastructure behind stores and order fulfilment. A spokesperson told The Times of London: “We are aware of the claims circulating online regarding a potential cybersecurity incident,” adding that the claims concern a limited scope of H&M Group data. H&M says it has so far found no sign of compromise. The attack has not been confirmed.
South African retailer TFG, by contrast, has confirmed an incident at its UK arm TFG London, home to Whistles, Phase Eight and Hobbs. According to FashionNetwork, the attack was detected on Sunday 11 October and disrupted some IT systems. Stores are open, but online orders have been paused as a precaution. TFG said it currently has no reason to believe payment information is at risk; external specialists and UK authorities have been brought in.
Only the week before, online retailer Asos had confirmed unauthorised access to personal data. According to FashionNetwork, sources quoted by The Times suspect that the same group behind the Asos attack is behind the claims against H&M. The fashion industry has repeatedly been targeted since 2025, with victims including Marks & Spencer, Adidas, Harrods and brands owned by LVMH and Kering.