Phase Eight and Hobbs owner hit by cyber-attack, as H&M probes separate hack claim
TFG London, which owns fashion brands Hobbs, Whistles, and Phase Eight, has identified a cyber-security incident affecting these three brands' IT systems, discovered on Sunday. This attack highlights the growing vulnerability of major fashion retailers to cyber-criminals seeking ransom payments by threatening to release customer data. The incident comes just days after Asos was hit by hackers who sent ransom demands directly to customers via push notifications on their phones, marking an unprecedented escalation in attack tactics.
TFG said physical stores continue operating normally but some website capabilities may be unavailable, and it believes customer payment information was not compromised, though some personal customer data may have been affected. Separately, fashion giant H&M is investigating claims of a hack by the notorious ShinyHunters group, though H&M says preliminary findings show no evidence of data compromise. Security experts note that no organisation is immune to such attacks, and the real measure of resilience is how quickly companies detect incidents, respond, and communicate with customers.
- TFG London's Phase Eight, Hobbs and Whistles brands hit by cyber-attack discovered Sunday
- H&M separately investigating alleged hack by ShinyHunters; says no evidence of compromise
- Latest attack follows Asos breach where hackers sent ransom demands via app notifications
New here? Start with this
Fashion retailers hold vast amounts of customer information, including personal details and payment records. Cyber-criminals often target these companies, attempting to steal this data and then demanding money in exchange for keeping it secret. If companies refuse to pay, hackers threaten to release the stolen information publicly, damaging the retailer's reputation and compromising customer privacy.
TFG London, which owns the fashion brands Hobbs, Whistles, and Phase Eight, discovered a cyber-attack affecting its systems on Sunday. The company says its physical stores are still operating normally but some website functions may not be available. Whilst TFG believes payment information was protected, some customer personal data may have been exposed in the breach.
This incident is part of a growing trend of cyber-attacks targeting major fashion retailers. Recent attacks have become more brazen, with hackers sending ransom demands directly to customers rather than just to companies. H&M is separately investigating claims of a hack, though it says initial checks suggest no customer data was compromised.