TFG London confirms cyberattack hits Phase Eight, Hobbs and Whistles systems

TFG London, the parent of several high‑end fashion labels, announced that a cybersecurity breach disrupted the digital infrastructure supporting its Phase Eight, Hobbs and Whistles brands.

The company said the incident was detected early this week and immediately triggered its incident‑response protocol. Technical teams isolated the affected networks, began forensic analysis and engaged external security specialists to assess the scope.

All three retailers reported varying degrees of interruption. Online storefronts experienced downtime, while some point‑of‑sale terminals in physical stores were temporarily offline, leading to delays in processing transactions and updating inventory.

TFG London released a statement confirming that customer data had not been confirmed as compromised, but it cautioned that investigations were ongoing and that it would notify affected individuals if any personal information were found to be at risk.

The breach arrives amid a wave of cyber activity targeting the retail sector, where attackers often exploit the large volumes of payment data and personal details held by fashion chains. Industry analysts note that supply‑chain and third‑party software vulnerabilities are common entry points.

In response, TFG London said it is enhancing its security architecture, including multi‑factor authentication, network segmentation and accelerated patch management. The firm also pledged to work closely with regulators and law‑enforcement agencies.

Customers of the affected brands have been advised to monitor account activity and to report any suspicious behavior. Retail outlets are expected to resume normal operations within the next few days as systems are restored and security checks completed.

The incident underscores the growing challenge of defending complex, multi‑brand retail ecosystems from sophisticated cyber threats, and it may prompt other fashion retailers to reassess their own digital defenses.