Independent Cybersecurity Incident Hits TFG London Affecting Major Fashion Brands
Article Content
- •TFG London confirmed a cybersecurity incident impacting Hobbs, Phase Eight, and Whistles.
- •No evidence suggests that customer payment information has been compromised.
- •Orders placed after October 11 may experience delays, but stores remain operational.
TFG London, the parent company of fashion brands Hobbs, Phase Eight, and Whistles, reported a cybersecurity incident on October 11, 2026, affecting its IT systems. The company activated its business continuity plan and engaged external cybersecurity experts to investigate the breach. TFG London assured customers that their payment information was not at risk, as processing is handled by a third-party provider. However, orders placed after October 11 may face delays, and the company is working to determine if any sensitive customer information was compromised. All stores remain open, but some website functionalities may be limited during the investigation. This incident follows a recent cyberattack on Asos, which raised concerns about the vulnerability of major retailers. TFG has reported the incident to relevant authorities and is committed to keeping customers informed as the situation develops.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (10)
Following this threat?
Track ASOS in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What brands are affected by the incident?
Is customer payment information at risk?
What should customers do if they placed an order after October 11?
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…