Cybersecurity
TFG London detects cyberattack on retail systems
TFG London said a cyberattack interrupted IT systems used by Phase Eight, Hobbs and Whistles, while stores stayed open and the company investigated possible data exposure.
- TFG London said it detected a cyberattack on 11 October and activated incident response and business continuity plans.
- The incident affected IT systems used by Phase Eight, Hobbs and Whistles, while physical stores remained open.
- The company said Inside Story and White Stuff, and its operations in Australia and Africa, were not affected.
- TFG London said it was investigating whether any customer information had been exposed and would notify affected people or organisations if needed.
- BleepingComputer said it had not found any threat actor publicly claiming the breach.
TFG London said it detected a cyberattack on 11 October and activated its incident response and business continuity plans. The incident affected IT systems used by Phase Eight, Hobbs and Whistles, while physical stores remained open.
The company said Inside Story and White Stuff were not affected, and it also said its operations in Australia and Africa were unaffected. It said external cybersecurity experts had been brought in to help contain the incident.
TFG London was still checking whether any customer information had been exposed and said it would contact affected people or organisations if necessary. BleepingComputer said it had not found any threat actor publicly claiming the breach.
The article also referred to a separate ASOS breach in which attackers used social engineering to obtain an employee's login details and reach customer data. It also noted rumours of a possible H&M incident, where an attacker claimed to be with ShinyHunters and threatened to leak data; H&M said it was investigating and had not found signs of compromise.
Named in this story
Companies
- TFG London
- the UK subsidiary that disclosed the incident and said several systems were unavailable
- The Foschini Group
- the South African parent that owns TFG London and the brands named in the report
- ASOS
- the retailer the article cited as having suffered a separate data breach
- H&M
- the retailer mentioned in separate rumours of a possible breach
Organisations
- Phase Eight
- one of the brands whose IT systems were affected
- Hobbs
- one of the brands whose IT systems were affected
- Whistles
- one of the brands whose IT systems were affected
- Inside Story
- one of the brands the company said was not affected
- White Stuff
- one of the brands the company said was not affected
- ShinyHunters
- the group name an attacker claimed when threatening to leak data
Places
- Australia
- one of the regions where the company said operations were unaffected
- Africa
- one of the regions where the company said operations were unaffected
How the source tells it
The article was largely neutral and factual, with a brief cautionary note in the advice about possible phishing and social engineering.
- caution the warning to remain alert after the incident