Full Breakdown
Major UK Fashion Retailer TFG London Hit by Cybersecurity Incident
By Drooid · · How we work
Incident Overview
On Sunday, 11 October, the UK subsidiary of South-African retail group The Foschini Group (TFG London) identified a “cybersecurity incident” that impacted IT systems for its three high-street brands—Phase Eight, Hobbs and Whistles. The breach prompted the company to pause some online functions, advise customers that orders placed on or after 11 October could be delayed, and launch an investigation with external cybersecurity specialists. Stores remained open, and the group reported the matter to the relevant UK authorities.
Background and Context
The attack follows a wave of recent retail-sector breaches. A week earlier, fast-fashion platform ASOS disclosed that an “unauthorised party” accessed names, addresses and recent search data of millions of customers. Earlier incidents have also affected Marks & Spencer, the Co-op and Harrods. Analysts note that retailers are attractive targets because they store large volumes of personal and payment information and rely on complex networks of suppliers and third-party technology providers.
Official Statements & Responses
TFG London emailed customers that its investigation was “ongoing,” that it had engaged external cybersecurity experts and notified the appropriate authorities. It confirmed stores were operating normally, returns could be made in-store, and it was working on a solution for postal returns. The firm pledged to inform any customers whose personal data might be compromised and to keep shoppers updated as the investigation progressed.
Data & Statistics
- Brands affected: Phase Eight, Hobbs, Whistles.
- Unaffected brands in the same group: Inside Story, White Stuff.
- Employee count for TFG London: more than 3,000.
- Geographic footprint: operations in the UK, Europe, America and Asia; Africa and Australia divisions were not impacted.
- Order impact: purchases placed before 11 October are being processed normally; those placed on or after 11 October may experience delays.
Industry Perspective
Security experts stress that the incident underscores the growing vulnerability of the retail sector.
Verbatim Quotes
- “No organisation is immune, so the real test of resilience is how quickly a business can detect an incident, respond and recover while keeping its customers informed,” — Beverley Griffiths, senior lecturer in security and resilience at Bucks New University
- “All our stores are open as normal and our teams will be happy to welcome you.” — TFG London, spokesperson
- “On Sunday, 11 October, TFG London identified a cybersecurity incident affecting some of our IT systems, specifically impacting our Phase Eight, Hobbs, and Whistles brands.” — TFG London, spokesperson
- “As soon as we identified the incident, we activated our business continuity plan, engaged external cybersecurity experts, and informed relevant authorities. Our investigation is ongoing, and we are working hard to get all our systems back up and running as quickly and safely as we can.” — Daily Newsletter It