Fashion retailer H&M is investigating claims of a cyber-security incident affecting its systems. The news follows reports of similar breaches at other prominent UK fashion brands, including TFG London, owner of Hobbs, Whistles, and Phase Eight, and online giant Asos.
H&M confirmed it is looking into information circulating online regarding a potential cyber-security incident. In a statement to BBC News, the company said, “At this time, we have not found any indications that our data environment has been compromised,” as reported by BBC News.
Wider Retail Sector Under Cyber-Attack
The investigation by H&M comes amid a heightened period of cyber-attacks targeting the retail sector. TFG London identified an incident on Sunday, specifically impacting its Phase Eight, Hobbs, and Whistles brands. The company told BBC News it is “actively investigating and working with external cyber security specialists.” While stores for these brands are operating as normal, some website capabilities may be unavailable, and all online orders have been paused as a precautionary measure, according to The Guardian.
TFG London has stated it does not believe customers’ payment information has been affected but is working to identify if any sensitive personal information was impacted. For Whistles customers, orders placed on or after October 11 may experience delays, and postal returns are temporarily unavailable, with customers advised to return items via stores.
Cyber-security experts have highlighted the increasing vulnerability of retailers. Charlotte Wilson, head of enterprise at cyber-security firm Check Point, noted that attacks targeting retailers are becoming more frequent, urging the industry to address the exposure of its systems. Marijus Briedis, chief technology officer at NordVPN, added that retailers are “particularly attractive targets because they hold valuable customer information and rely on a sprawling network of payment systems, suppliers and third-party technology providers.”
The incidents also follow a recent breach at online fashion and beauty retailer Asos, where customer names, addresses, and recent search data were accessed. Hackers reportedly used push notifications on phone screens to deliver what experts described as an “unprecedented” ransom note.
H&M’s Physical Retail Presence Evolves
Separately, H&M has recently made significant changes to its physical retail footprint in Northampton. After approximately 26 years, H&M vacated its prominent unit in Abington Street on May 30, 2025. The retailer subsequently opened a new two-floor store in the Grosvenor Centre in June 2025, moving into the former New Look unit and gaining greater prominence facing Northampton’s Market Square, as reported by Northampton Chronicle and Echo.
The former H&M site on Abington Street has since reopened as ‘House to Home’, which sells a diverse range of items including saucepans, backpacks, rugs, pillows, furniture, and suitcases, with a special opening offer of 50 per cent off. Other retail changes in the area include the former Bodycare store reopening as ‘Trend the Look’, a clothing retailer, and the former O’Neills pub in Drapery becoming ‘Tech Point’, selling suitcases and mobile phones.
What This Means for Shoppers
The string of cyber-attacks on major retailers underscores the importance of cyber vigilance for consumers across the UK, including those in Bristol and the South West. While H&M has yet to find evidence of compromise, incidents at TFG London and Asos highlight the potential for personal data to be affected. Customers of these brands should remain alert to communications regarding their data and be wary of suspicious messages, a sentiment echoed by Beverley Griffiths, senior lecturer in security and resilience at Bucks New University.
