Cyber SHOCKWAVE: Major Fashion Retailer Hit By Devastating Security Breach
TFG London, parent to Hobbs, Phase Eight, and Whistles, confirmed a cybersecurity incident affecting its IT systems. While an investigation is ongoing, the company assures customers that payment information is not believed to be at risk, as processing is handled by a third party. Stores remain open, though some website functionalities and later order deliveries may be impacted.
TFG London, the parent company overseeing prominent women's fashion brands Hobbs, Phase Eight, and Whistles, has publicly addressed a recent 'cybersecurity incident' that affected some of its IT systems. The incident was first identified on Sunday, 11 October, prompting immediate action from the company.
Upon discovery, TFG London promptly activated its business continuity plan, enlisted external cybersecurity experts to assist with the investigation, and informed all relevant authorities. The company's investigation is currently ongoing, with efforts focused on restoring all systems swiftly and securely. While the technical teams work diligently, stores, including the Hobbs outlet in Manchester city centre, are operating as normal. Orders placed prior to Sunday are being processed and delivered without disruption, though later orders may experience delays due to the incident.
Crucially, TFG London has reassured customers that there is no reason to believe payment information has been compromised. This confidence stems from the fact that payment processing for its brands is handled by a third-party provider. The company stated in an email to customers: "Based on our investigation so far, we have no reason to believe that payment information is at risk." The ongoing investigation aims to determine if any other sensitive customer information was impacted. Should it be determined that personal information was affected, customers will be directly informed. At present, the company does not deem it necessary for customers to change their account login information.
TFG London has expressed its apologies for any inconvenience caused by this incident and is committed to keeping customers updated as more information becomes available. As a precautionary reminder, the company reiterated that Hobbs, Phase Eight, or Whistles will never request passwords or full payment card details via email, text, or phone. This cybersecurity event specifically impacted the IT systems supporting the Phase Eight, Hobbs, and Whistles brands, and while stores remain open, some website functionalities may be temporarily unavailable as the investigation progresses. TFG London, which entered the UK market in 2015 with the acquisition of Phase Eight and later added Whistles and Hobbs to its portfolio, employs over 3,000 people and operates across the UK, Europe, America, and Asia.