TFG London cyberattack disrupts systems at Hobbs and Whistles retailers

TFG London detected a cybersecurity incident that impacted IT systems used by the Phase Eight, Hobbs, and Whistles premium fashion brands.

The company disclosed earlier today that several IT systems remain unavailable, although physical stores remain open for customers.

According to the press release, the incident has not affected the group’s other brands, Inside Story and White Stuff, or its operations in Australia and Africa.

TFG London is the UK subsidiary of South Africa’s The Foschini Group, which owns the aforementioned five fashion and homeware brands.

As of mid-2026, the group operated 649 retail locations globally and reported annual sales of £488 million ($646M).

The company said it detected the cyberattack on October 11 and immediately activated its incident response and business continuity plans, bringing in external cybersecurity experts to help contain the threat.

TFG London is investigating whether any customer information has been compromised, and says it will notify affected individuals or organizations if it data has been affected.

BleepingComputer could not find any threat actor publicly claiming the TFG London breach.

The incident at TFG London comes shortly after another UK fashion retailer, ASOS, suffered a data breach after hackers sent push notifications to users of its mobile app.

The company later confirmed that attackers used social engineering to steal an employee’s login credentials and gained unauthorized access to customer data, including names, contact details, and account information.

At this time, TFG London has not confirmed any customer data exposure, but clients of Phase Eight, Hobbs, and Whistles are advised to remain alert for potential phishing and social engineering attacks.

Earlier this week, rumors emerged about an attack at Swedish multinational clothing company H&M, claimed by an attacker saying they were with the ShinyHunters group and threatening to leak stolen data.

Responding to our request for a comment on these allegations, an H&M spokesperson said they were looking into these claims, although current evidence didn't indicate a breach.

“We are aware of information circulating online regarding a potential cyber security incident and are currently investigating the claims,” the H&M spokesperson told BleepingComputer.

“At this time, we have not found any indications that our data environment has been compromised.”