Recent high-profile cyber-attacks at ASOS, H&M, and TFG (including Hobbs, Phase Eight, and Whistles) illustrate the severe operational disruption facing the fashion retail industry. As these major brands launch investigations into data environment breaches, unauthorized system access, and compromised customer data, the ongoing operational fallout highlights escalating security threats. With hackers utilizing AI-driven methods to exploit corporate infrastructure, cyber-attack response is becoming a defining test of consumer trust for apparel brands, says GlobalData, a leading intelligence and productivity platform.

Following ASOS’ 06 October breach, the brand issued unannounced, mass password resets after many customers received an unexpected and ominous ASOS app notification, which inadvertently stoked public fears of a wider system compromise.

Similarly, TFG did not initially clarify which consumer segments were vulnerable across its brand portfolio, leading to reputational damage across its fascias. Meanwhile, H&M has faced claims of a breach, leading to a diversion of corporate resources to investigate the claims and an immediate drop in share price.

In 2026, silent mitigation following cyber-attacks has proven to backfire by eroding public trust faster than the technical hack itself.

Chloe Tedford-Jones, Apparel Analyst at GlobalData, comments: “These vague brand responses to cyber-attacks contrast with historical precedents. When Marks & Spencer detected an anomaly exposing customer details last spring, the brand took decisive action to limit the reputational and operational fallout.”

Marks & Spencer swiftly suspended all online transactions to secure its systems immediately, whilst simultaneously stating the exact operational perimeter of the issue, clarifying which data and customer segments were affected. This rapid response and clear communication went some ways to prevent panic among consumers and can be credited with mitigating any long-term erosion of trust from consumers.

Tedford-Jones concludes: “Apparel brands and retailers must treat cyber-attack disclosure as brand governance, rather than mitigating damage to prevent company liability. Brands should quickly explain what is known, who may be affected and the measures being taken to secure accounts and services. Proactive and consistent communication is essential prevent operational disruption and irreparable reputational damage, whilst investment in robust cyber-security is imperative as developments in AI will continue to multiply the threat.”