OP 14 October, 2026 - 12:35 AM
TFG London has identified a cybersecurity incident that affected IT systems used by premium brands Phase Eight, Hobbs and Whistles.
Today, the company reported that several IT systems are still unavailable, although physical stores continue to work for customers.
According to the press release, the incident did not affect the group's other brands - Inside Story and White Stuff - as well as its activities in Australia and Africa.
TFG London is the UK subsidiary of South African company The Foschini Group, which owns the aforementioned five fashion and home goods brands.
As of mid-2026, the group operated 649 retail outlets worldwide and reported an annual turnover of £488 million ($646 million).
The company said it detected the cyberattack on Oct. 11 and immediately activated its incident response and business continuity plans, bringing in external cybersecurity experts to help contain the threat.
TFG London is conducting an investigation to establish whether any customer information has been compromised and says it will notify affected individuals or organisations if their data is compromised.
BleepingComputer has not been able to find any threat actors who have publicly claimed responsibility for the TFG London breach.
The TFG London incident came shortly after another British fashion retailer, ASOS, fell victim to a data breach when hackers sent push notifications to users of its mobile app.
The company later confirmed that the attackers used social engineering techniques to steal the credentials of one of the employees and gained unauthorized access to customer data, including names, contact details, and account information.
At this time, TFG London has not confirmed the breach of customer data, but customers of the Phase Eight, Hobbs and Whistles brands are advised to remain vigilant against possible phishing and social engineering attacks.
Earlier this week, rumors surfaced of an attack on Swedish clothing multinational H&M, for which an attacker claimed responsibility, claiming to be a member of the ShinyHunters group, and threatened to release the stolen data.
Responding to our request for comment on the allegations, an H&M spokesperson said the company is looking into the allegations, although the evidence available so far does not point to a data breach.
"We are aware of information circulating online regarding a potential cybersecurity incident, and we are currently investigating these allegations," an H&M spokesperson told bleepingcomputer.
"At this point, we have not found any indication that our storage system has been compromised."
source : https://www.bleepingcomputer.com/news/se...retailers/
Today, the company reported that several IT systems are still unavailable, although physical stores continue to work for customers.
According to the press release, the incident did not affect the group's other brands - Inside Story and White Stuff - as well as its activities in Australia and Africa.
TFG London is the UK subsidiary of South African company The Foschini Group, which owns the aforementioned five fashion and home goods brands.
As of mid-2026, the group operated 649 retail outlets worldwide and reported an annual turnover of £488 million ($646 million).
The company said it detected the cyberattack on Oct. 11 and immediately activated its incident response and business continuity plans, bringing in external cybersecurity experts to help contain the threat.
TFG London is conducting an investigation to establish whether any customer information has been compromised and says it will notify affected individuals or organisations if their data is compromised.
BleepingComputer has not been able to find any threat actors who have publicly claimed responsibility for the TFG London breach.
The TFG London incident came shortly after another British fashion retailer, ASOS, fell victim to a data breach when hackers sent push notifications to users of its mobile app.
The company later confirmed that the attackers used social engineering techniques to steal the credentials of one of the employees and gained unauthorized access to customer data, including names, contact details, and account information.
At this time, TFG London has not confirmed the breach of customer data, but customers of the Phase Eight, Hobbs and Whistles brands are advised to remain vigilant against possible phishing and social engineering attacks.
Earlier this week, rumors surfaced of an attack on Swedish clothing multinational H&M, for which an attacker claimed responsibility, claiming to be a member of the ShinyHunters group, and threatened to release the stolen data.
Responding to our request for comment on the allegations, an H&M spokesperson said the company is looking into the allegations, although the evidence available so far does not point to a data breach.
"We are aware of information circulating online regarding a potential cybersecurity incident, and we are currently investigating these allegations," an H&M spokesperson told bleepingcomputer.
"At this point, we have not found any indication that our storage system has been compromised."
source : https://www.bleepingcomputer.com/news/se...retailers/
![[Image: Pn2slWO.jpeg]](https://i.imgur.com/Pn2slWO.jpeg)
LIFETIME