express gazette logo
The Express Gazette
Tuesday, October 13, 2026

Fashion Retailer TFG London Hit by Cybersecurity Incident

The parent company of Hobbs, Phase Eight, and Whistles has alerted customers to a 'cybersecurity incident' impacting its IT systems.

Business & Markets • 3 hours ago
Fashion Retailer TFG London Hit by Cybersecurity Incident

The Foschini Group (TFG), a South African retail conglomerate, has announced that its subsidiary TFG London, which owns fashion brands Hobbs, Phase Eight, and Whistles, has been the target of a cybersecurity incident. The company became aware of the breach on Sunday, October 11, and has since engaged external cybersecurity experts to investigate.

TFG London stated in an email to customers that the attack affected some of its IT systems. The investigation is ongoing, with efforts focused on restoring systems safely and quickly. The retailer has not yet determined if any sensitive customer information was compromised. If personal information is found to have been affected, affected customers will be directly notified. At this time, TFG London does not believe it is necessary for customers to change their account login information.

While orders placed on or after Sunday may experience delays, TFG London has confirmed that its stores remain open and operational. The company has also stated that, based on its current investigation, there is no reason to believe that customer payment information is at risk.

This incident follows other recent cyberattacks on fashion retailers. Last week, H&M announced it was investigating claims of a cyberattack, potentially carried out by a group known as Shinyhunters, which has previously claimed responsibility for an attack on Jaguar Land Rover. Additionally, Asos confirmed a security breach where hackers gained unauthorized access to basic customer contact details, although the company stated that payment card details and passwords were not believed to be affected. However, reports suggest that cybercriminals may have accessed more information than initially disclosed by Asos, potentially including names, addresses, phone numbers, email addresses, and past searches.


Sources