TFG London detected a cybersecurity incident that impacted IT systems used by the Phase Eight, Hobbs, and Whistles premium fashion brands.
The company disclosed earlier today that several IT systems remain unavailable, although physical stores remain open for customers.
According to the press release, the incident has not affected the group’s other brands, Inside Story and White Stuff, or its operations in Australia and Africa.
TFG London is the UK subsidiary of South Africa’s The Foschini Group, which owns the aforementioned five fashion and homeware brands.
As of mid-2026, the group operated 649 retail locations globally and reported annual sales of £488 million ($646M).
The company said it detected the cyberattack on October 11 and immediately activated its incident response and business continuity plans, bringing in external cybersecurity experts to help contain the threat.
TFG London is investigating whether any customer information has been compromised, and says it will notify affected individuals or organizations if it data has been affected.
BleepingComputer could not find any threat actor publicly claiming the TFG London breach.
The incident at TFG London comes shortly after another UK fashion retailer, ASOS, suffered a data breach after hackers sent push notifications to users of its mobile app.
The company later confirmed that attackers used social engineering to steal an employee’s login credentials and gained unauthorized access to customer data, including names, contact details, and account information.
At this time, TFG London has not confirmed any customer data exposure, but clients of Phase Eight, Hobbs, and Whistles are advised to remain alert for potential phishing and social engineering attacks.
Earlier this week, rumors emerged about an attack at Swedish multinational clothing company H&M, claimed by an attacker saying they were with the ShinyHunters group and threatening to leak stolen data.
Responding to our request for a comment on these allegations, an H&M spokesperson said they were looking into these claims, although current evidence didn’t indicate a breach.
“We are aware of information circulating online regarding a potential cyber security incident and are currently investigating the claims,” the H&M spokesperson told BleepingComputer.
“At this time, we have not found any indications that our data environment has been compromised.”
Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed.
Cyberattack shuts down refrigerators at French supermarkets
UK Housing Ombudsman Service investigates ‘security incident’
Retail giant Ahold Delhaize takes systems offline after cyberattack
FBI disrupts Chinese hacking tools used to breach critical infrastructure
ASOS links data breach to social engineering attack, credential theft
Ledger confirms spy chip implant behind wallet crypto thefts
Nippon Columbia malware incident exposes 8.6 million karaoke fan records
Cyberattack shuts down refrigerators at French supermarkets
AI is a data-breach time bomb: Read the new report
Overdue a password health-check? Audit your Active Directory for free
Move from visibility to action with AITEM, Criminal IP’s next evolution of ASM
AWS saw a valid key and let the agent clear a production bucket. See how Token Security ties each agent to its owner and limits it to read-only access.
New OAuth risk analyst agent: Turn 45 minutes of manual review into 15 seconds.
Is your backup really out of reach? See what the latest attacks reveal.
Terms of Use – Privacy Policy – Ethics Statement – Affiliate Disclosure
Read our posting guidelinese to learn what content is prohibited.
