The owner of fashion brands Hobbs, Whistles, and Phase Eight, TFG London, part of The Foschini Group, is investigating a cyber-security incident that was identified on Sunday. The incident has affected some IT systems, specifically impacting the Phase Eight, Hobbs, and Whistles brands. The company stated, "We are actively investigating and working with external cyber security specialists," in a statement to BBC News.
TFG reported that its stores are operating normally, although some website capabilities may be unavailable. The company apologized for any disruption and indicated that it would provide updates to customers as necessary. It also informed customers via email that it does not believe payment information was compromised during the incident. TFG added, "As our investigation continues, we will be working to identify if any sensitive information related to our customers was impacted," and that those affected would be notified directly. The email reassured customers that it was not necessary to change account login information at this time.
Beverley Griffiths, a senior lecturer in security and resilience at Bucks New University, commented that this incident highlights the vulnerability of major brands to cyber attacks. She noted that various fashion brands, including Adidas and Alexander McQueen, have been targeted by cyber-criminals seeking ransom by threatening to release customer data. Griffiths emphasized the importance of businesses being able to detect, respond to, and recover from such incidents while keeping customers informed, urging customers to remain vigilant against suspicious messages.
Charlotte Wilson, head of enterprise at cyber-security firm Check Point, remarked that attacks on retailers are becoming increasingly frequent. She stated, "...you wait for one, and suddenly three come along at once," and noted that it is too early to determine how the incident at TFG London occurred or if it is connected to other recent hacks. Wilson highlighted the need for the retail industry to address vulnerabilities in its systems.
In a separate incident, H&M is investigating claims of a cyber-attack by a group known as ShinyHunters, which has previously targeted organizations like the FBI and Rockstar Games. H&M stated, "We are aware of information circulating online regarding a potential cyber security incident and are currently investigating the claims." The company has not found indications that its data environment has been compromised.
This news follows a recent incident involving Asos, where customers were notified of a hack through a push notification. Cyber-security experts noted that it was unusual for hackers to use an app notification system as a ransom note, and further details revealed that hackers had accessed more personal information than Asos initially disclosed.