TFG London cyberattack disrupts Hobbs, Whistles IT systems
The Foschini Group's UK unit found a security breach on October 11, leaving online services offline and delaying customer orders.
Key points
- TFG London detected a cybersecurity incident affecting Hobbs, Phase Eight, and Whistles on October 11.
- Several IT systems remain offline, causing order delays for purchases made on or after Sunday.
- The company states that third-party payment processors likely protected customer financial data.
The Foschini Group confirmed on Tuesday that its UK subsidiary, TFG London, discovered a cybersecurity incident on October 11. The breach affects the retailer’s three main fashion brands: Hobbs, Phase Eight, and Whistles.
Several IT systems remain offline as the company investigates the scope of the intrusion. TFG London is still determining whether personal or sensitive information was compromised during the attack.
Operational Impact and Response
Physical retail locations remain open for business, but the company has warned that some website capabilities are unavailable. Customers who placed orders on or after Sunday face potential delivery delays, according to an email seen by The Telegraph.
TFG activated its incident response and business continuity plans immediately after detection. The company brought in external cybersecurity specialists to assist with the investigation and notified relevant UK authorities about the breach.
Data Exposure Concerns
TFG London stated that a third-party provider handles payment processing for its online stores. Based on the initial investigation, the company has no reason to believe that payment information is at risk.
However, the status of other customer data remains uncertain. The retailer is continuing to investigate whether any non-payment personal data was accessed or exfiltrated by the attackers.
What should you do?
That suggests customers should monitor their accounts for unusual activity while the investigation continues. Shoppers should also check their email for official updates from the retailer regarding data compromise.
What to do and how to stay safe: TFG London
- Check your email inbox for official notifications from TFG London or its brands regarding data exposure.
- Monitor your bank and credit card statements for any unauthorized transactions, even if payment data appears safe.
- Change passwords for any online accounts associated with Hobbs, Phase Eight, or Whistles if you suspect credential reuse.
- Enable multi-factor authentication on your retail accounts to add an extra layer of security against unauthorized access.
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Which brands are affected by the TFG London cyberattack?
The incident affects Hobbs, Phase Eight, and Whistles, all owned by TFG London.
Is customer payment information at risk?
TFG London states that a third-party provider handles payments and currently sees no evidence that payment data is compromised.
Are physical stores affected by the incident?
No, physical stores remain open as normal, though some online website functions may be unavailable.
