THE FOSCHINI GROUP LIMITED – Cybersecurity incident at TFG London

THE FOSCHINI GROUP LIMITED (Incorporated in the Republic of South Africa) Registration number 1937/009504/06 LEI: 3789PTO7LG718IG59F97 JSE / A2X code: TFG Ordinary code: TFG ISIN: ZAE000148466 Preference code: TFGP ISIN: ZAE000148516 (‘TFG’ or ‘the Group’)

CYBERSECURITY INCIDENT AT TFG LONDON

Shareholders are advised that TFG London, the Group’s UK-based business, identified a cybersecurity incident on 11 October 2026 affecting certain of its IT systems, specifically our Phase Eight, Hobbs and Whistles brands. Inside Story and White Stuff are not affected.

The Group immediately activated its incident response and business continuity plans. TFG London has engaged external cybersecurity specialists to contain the incident. The incident has been reported to the relevant UK authorities.

TFG London’s stores remain open and trading, although several of its IT systems remain unavailable. The Group’s operations in TFG Africa and TFG Australia run on separate systems and are not affected.

The investigation is ongoing, including establishing whether any personal or other sensitive information has been compromised. Should the investigation establish that such information has been compromised, TFG London will notify affected individuals or organisations, as appropriate.

The Board will continue to assess the situation and will communicate any material developments by way of a further SENS announcement if required.

Cape Town 13 October 2026 JSE Sponsor: Rand Merchant Bank (A division of FirstRand Bank Limited)

Date: 13/10/2026 07:05:00 Produced by the JSE SENS Department. The SENS service is an information dissemination service administered by the JSE Limited (‘JSE’). The JSE does not, whether expressly, tacitly or implicitly, represent, warrant or in any way guarantee the truth, accuracy or completeness of the information published on SENS. The JSE, their officers, employees and agents accept no liability for (or in respect of) any direct, indirect, incidental or consequential loss or damage of any kind or nature, howsoever arising, from the use of SENS or the use of, or reliance on, information disseminated through SENS.