TFG London (Victim): news timeline & CVEs

Phase Eight, Hobbs and Whistles owner joins growing list of fashion retailers targeted by hackers

TFG London says an October 11 attack hit systems for Phase Eight, Hobbs and Whistles; data exposure remains unconfirmed.

TFG London, the UK arm of South Africa’s The Foschini Group, detected a cyberattack on 11 October 2026 affecting IT systems used by Phase Eight, Hobbs and Whistles. Inside Story and White Stuff were spared, and TFG Africa and Australia run separate systems. Stores stayed open while some systems remained down, and whether personal data was exposed is still under investigation. The incident follows a recent ASOS attack, while H&M says it has found no compromise after ShinyHunters claims.

Help Net SecurityOct 14, 10:48 UTC · 2d agoData breach in the wild 2 sources2· 1 read

European Retail Firms Confirm Cyber Incidents

Ahold Delhaize, TFG, and ASOS confirmed cyber incidents, with ASOS reporting access to customer contact data.

Several European retailers confirmed separate cyber incidents in mid-October 2026. Ahold Delhaize took systems offline after a security issue affecting Albert Heijn, Etos, and Gall & Gall, while The Foschini Group investigated an incident at TFG London impacting Phase Eight, Hobbs, and Whistles and said payment data did not appear at risk. ASOS confirmed unauthorized access to third-party customer-communication platforms, exposing names, contact details, and some non-personal account data, but not payment cards or passwords. Separately, attackers tampered with refrigeration controls at French supermarkets, causing food losses estimated in the hundreds of thousands of euros. H&M found no evidence its environment was compromised.

Infosecurity MagazineOct 13, 14:00 UTC · 3d agoData breach in the wild2· 1 read

Owner of fashion brands Hobbs and Whistles joins autumn pwned collection

TFG London's Hobbs, Phase Eight, and Whistles brands are disrupted after an October 11 cyberattack.

The Foschini Group said its UK fashion business, TFG London, discovered a cybersecurity incident on October 11 affecting Hobbs, Phase Eight, and Whistles. Several systems remain offline, some website functions are unavailable, and orders placed from Sunday may be delayed, while stores stay open. TFG has not confirmed whether personal data was taken or whether ransomware was used; it says a third-party processor handles payments and those details are not believed at risk. The UK ICO confirmed it received a breach report. Separately, ASOS said an attacker impersonated a trusted contact to steal employee credentials and reach customer contact data, while H&M is examining unconfirmed ShinyHunters claims.

The Register · Securityupdated Oct 14, 10:48 UTC · 2d agofirst Oct 13, 09:45 UTC · 3d agoData breach in the wild 2 sources

TFG London

Timeline3 articles

Appears with

Phase Eight, Hobbs and Whistles owner joins growing list of fashion retailers targeted by hackers

European Retail Firms Confirm Cyber Incidents

Owner of fashion brands Hobbs and Whistles joins autumn pwned collection