Back Thisismoney Hobbs and Phase Eight owner hit by a cyber attack after H&M fears it was targeted
The parent company of fashion brands including Hobbs, Phase Eight and Whistles has become the latest retailer targeted by cyber criminals - as H&M investigates a suspected incident.
South African retail group The Foschini Group (TFG) said it had become aware of a 'cybersecurity incident' on Sunday, affecting its subsidiary TFG London.
It said it had identified the attack, which affected some of its IT systems, on October 11 and had engaged external experts.
‘Our investigation is ongoing and we are working hard to get all our systems back up and running as quickly and safely as we can,’ it said in an email to customers.
TFG London said there was no reason to believe customers’ payment information was at risk, although orders made on or after Sunday may be delayed. Its stores are open as normal.
It comes after H&M said it was investigating claims it was targeted in a cyber attack last week.
The Swedish fashion powerhouse said it is looking into a potential incident made by a group called Shinyhunters, which has previously claimed it was behind the attack on Jaguar Land Rover.
TFG London, which owns Hobbs (pictured), has been targeted by cyber criminals
‘Based on our investigation so far, we have no reason to believe that payment information is at risk. As our investigation continues, we will be working to identify if any sensitive information related to our customers was impacted,’ it said.
‘If we determine that your personal information was affected, you will be directly informed. We do not believe it is necessary to change your account login information at this time.
‘Our investigation is ongoing, and our teams are working tirelessly to get all our systems running again safely.
‘We know this news may be unsettling, and we’re committed to keeping you updated as we have more information to . We are very sorry for any inconvenience this incident has caused.’
It follows an attack on Asos last week, which saw hackers directly communicate with customers via an app notification.
Messages sent by the hackers to customers' phones said they had 'fully compromised the Snowflake instance', referring to the online platform that collects data, including that of customers.
The retailer confirmed the ‘basic details’ of users had been taken in the security breach but said it did not believe payment card details or passwords were affected.
Asos said an 'unauthorised party' gained access by impersonating a trusted to get log-in information.
It is now believed that the cyber criminals could have access to more information than Asos originally confirmed. Names, addresses, phone numbers, email addresses and past searches could all have been breached, the BBC reported.
The recent spate of cyber attacks on retailers risks putting customer details in the hands of cyber criminals.
The Information Commissioner's Office (ICO) and cyber experts suggest you do the following:
Look out for any suspicious messages which can arrive after a cyber incident
Do not click on any unexpected texts or mails, including push notifications
If you want to update your password or other details, ensure you do so through the official website or app
Monitor bank accounts for any unusual activity
Always use passkeys or strong, separate passwords plus two-step verifications for your accounts
Use the Report Fraud website or call 0300 123 2040 to log any suspicious activity
DIY INVESTING PLATFORMS
Affiliate links: If you take out a product This is Money may earn a commission. These deals are chosen by our editorial team, as we think they are worth highlighting. This does not affect our editorial independence.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
