TFG London fashion brands hit by cybersecurity incident; payment data safe

TFG London, parent company of fashion brands Hobbs, Whistles, and Phase Eight, has confirmed a cybersecurity incident on 11 October affecting IT systems and website capabilities across the three brands. Payment information is not believed to be at risk as payment processing is handled externally. The company is investigating whether customer personal data was compromised and has paused online orders as a precautionary measure.

Quick Facts

Cybersecurity incident identified affecting some IT systems
Online orders paused as precautionary measure
Physical stores remain open
Investigation ongoing with external cybersecurity specialists
Incident reported to relevant UK authorities

The Foschini Group (TFG) London, which operates the fashion brands Hobbs, Whistles, and Phase Eight, has confirmed a cybersecurity incident identified on Sunday, 11 October, affecting some IT systems and website capabilities across the three brands. The company has paused online orders as a precautionary measure and is working with external cybersecurity specialists to investigate and contain the breach. TFG has reported the incident to relevant UK authorities.

Physical stores remain open and operating normally. Orders placed before 11 October will be processed and delivered as scheduled, though later orders may experience delays. Payment information is not believed to be at risk, as payment processing is handled by a third-party provider rather than TFG's own systems. The company's other UK brands, Inside Story and White Stuff, are not affected, and operations in Africa and Australia run on separate systems and remain unaffected.

TFG is investigating whether any customer personal data was compromised during the incident. The company has stated that if its investigation determines personal information was accessed, affected individuals will be notified directly. Currently, the company does not believe it is necessary for customers to change their account login information. Some website capabilities may remain unavailable during the ongoing investigation.

The incident comes within days of other high-profile retail sector cybersecurity breaches. Online fashion retailer Asos announced a hack affecting customer data in late September, and H&M is separately investigating claims of a cyberattack by the hacking group ShinyHunters, though H&M stated it has found no indications that its data environment has been compromised. Cybersecurity experts have noted that the retail industry has become an increasingly attractive target for attackers seeking to exploit customer data and payment systems.

Topics

Technology Business World

#data breach #Hobbs #incident investigation #cyberattack #Whistles #retail #TFG London #payment data #Phase Eight #customer data

Entities

Why This Matters

TFG London has suspended online order processing across three major UK fashion brands (Hobbs, Whistles, Phase Eight) following a confirmed cybersecurity incident. While payment systems remain unaffected due to external processing, the company is investigating potential customer personal data compromise. Physical stores continue operating; customers who placed orders before 11 October will receive normal processing, though later orders may face delays. The incident affects a significant retail operation and illustrates ongoing vulnerability in the retail sector to cyberattacks.

Timeline & Sources

Jan 1, 2015

Wire

TFG London entered UK market after acquiring Phase Eight

Oct 11, 2026

Wire

TFG London identifies cybersecurity incident affecting Hobbs, Whistles, and Phase Eight

Oct 13, 2026

Wire

Manchester Evening News reports on TFG London cybersecurity incident

Oct 13, 2026

Wire

BBC reports TFG London cybersecurity incident; H&M investigating separate hack claim

Oct 13, 2026

Wire

The Guardian reports on TFG London hack investigation