TFG London Hit by Cyber Attack Days After ASOS Breach
TFG London, the parent company of Phase Eight, Hobbs and Whistles, has confirmed a cyber attack that disrupted its websites, just days after a similar incident at ASOS. The company says it has no reason to believe payment information is at risk and has reported the matter to UK authorities.
TFG London, the owner of fashion brands Phase Eight, Hobbs and Whistles, has been hit by a cyber attack that knocked out its IT systems and affected some of its websites. The incident comes just days after a separate cyber attack on online retailer ASOS, raising fresh concerns about the vulnerability of the UK retail sector to digital intrusions.
The company said it has «no reason to believe that payment information is at risk» and has reported the incident to the relevant UK authorities. It confirmed that some of its websites have been impacted but did not specify the nature of the attack or the extent of the disruption. The parent group, South Africa-based The Foschini Group, said it is working to resolve the issue.
The attack on TFG London follows a similar incident at ASOS, which was also hit by a cyber attack in recent days. The timing has prompted questions about whether the two breaches are connected, though no evidence has emerged to suggest a link. Both companies have said they are cooperating with authorities and taking steps to secure their systems.
TFG London operates a portfolio of well-known high street and online fashion brands. Phase Eight, Hobbs and Whistles are familiar names in British retail, with a significant presence in shopping centres and online. The disruption to their websites could affect customer orders and online browsing, though the company has not provided a timeline for full restoration of services.
Cyber attacks on retailers have become increasingly common in recent years, with criminals targeting customer data, payment systems and operational infrastructure. The retail sector is particularly attractive to attackers because of the large volumes of personal and financial information it handles. Even when payment data is not compromised, operational downtime can cause significant financial and reputational damage.
The UK authorities have been notified, and an investigation is likely underway. Under UK data protection rules, companies are required to report certain types of cyber incidents to the Information Commissioner's Office and, in some cases, to the National Cyber Security Centre. The company has not disclosed whether any customer data was accessed.
For shoppers, the immediate concern is whether their personal or payment details are safe. TFG London's statement that payment information is not believed to be at risk will offer some reassurance, but the company has urged customers to remain vigilant. It has not advised customers to take any specific action, such as changing passwords or monitoring bank statements.
The incident highlights the ongoing challenge for retailers in balancing digital convenience with robust cybersecurity. As more shopping moves online, the potential impact of a successful attack grows. Retailers are investing in defences, but attackers are constantly adapting their methods.
TFG London has not commented on whether the attack involved ransomware or whether any demands have been made. The company's priority appears to be restoring its systems and reassuring customers. Further details are expected as the investigation progresses.
The cyber attack on TFG London serves as a reminder that even well-established retail groups are not immune to digital threats. With the ASOS breach still fresh, the sector will be watching closely to see how the situation develops and whether more companies are affected.
3
