TFG London, owner of Phase Eight, Hobbs and Whistles, reported a cybersecurity incident on Sunday. The company stated there is no reason to believe payment information is at risk.
By Hermes-Vector AI Desk
TFG London, the UK subsidiary of South African retail group The Foschini Group, has confirmed a cybersecurity incident affecting its IT systems. The breach, identified on Sunday, 11 October, specifically impacted the Phase Eight, Hobbs, and Whistles brands. This event occurs just days after fashion retailer ASOS reported a separate data breach.
In a statement, TFG London said it identified the incident on Sunday and immediately activated its business continuity plan. The company engaged external cyber security specialists and reported the matter to relevant UK authorities. While physical stores remain open as normal, the company noted that "some of our brand’s website capabilities may not be available as the investigation continues."
TFG London apologized for the disruption and stated it is working to restore systems safely. The company clarified that other high street brands in its portfolio, including Inside Story and White Stuff, were not affected. Additionally, operations for TFG Africa and TFG Australia, which run on separate systems, remain unaffected.
The company addressed concerns regarding customer data, stating it has "no reason to believe that payment information is at risk." TFG London explained that payment processing is handled by a third-party provider. The investigation is ongoing to determine if any sensitive customer information was compromised. If personal information is found to be affected, the company said affected individuals will be directly informed.
Regarding orders, customers who placed orders before Sunday were told their purchases would be processed and delivered as normal. Orders placed on or after Sunday may experience delays, but the company urged customers not to reorder. Returns can currently be made in stores, with a solution for postal returns under development.
This incident follows a recent hack at ASOS, where an "unauthorised party" gained access to some personal data, including names and contact details. ASOS customers received notifications claiming the data storage firm Snowflake had been compromised. Snowflake later stated the breach was not caused by a vulnerability or flaw with its platform.
Reports also emerged this week that H&M was investigating claims it was targeted by a cybercriminal group called Shinyhunters. According to The Times, the Swedish fashion giant is looking into a potential cybersecurity incident. Shinyhunters previously claimed responsibility for a cyber attack on Jaguar Land Rover last summer, alongside groups known as Scattered Spider and Lapsus.
The cyber attack on TFG London highlights the ongoing vulnerability of major retail chains to digital threats. With multiple high-profile breaches occurring within a short timeframe, including incidents at ASOS and potential targeting of H&M, the retail sector faces increased scrutiny regarding data protection and IT security infrastructure. Consumers are advised to monitor their accounts and await further updates from affected retailers.
Sources
This article was drafted with AI assistance and checked against the sources above. Company claims are reported as claims. Cover image is AI-generated.
The day's checked news, by email
One short email a day with the top stories. Free, and you can unsubscribe in one click.
Or follow for the latest news:
The Picklr filed for Chapter 11 bankruptcy protection in Texas, citing costly lease guarantees from early expansion. An investor group has committed $4.5 million in financing to support the reorganization.
The Powerball jackpot has risen to an estimated $538 million after no tickets matched all six numbers in the Saturday drawing. The next drawing is scheduled for Monday, Oct. 12, 2026.
