TFG London has reported a cybersecurity incident affecting Phase Eight, Hobbs and Whistles this morning. It comes within days of the ASOS breach, which occurred just a few days ago.
Vincent Guillevic, director of fraud labs at Entrust, said: “E-commerce and digital retail organisations like TFG and ASOS operate at the intersection of payments, personal data, digital identities, and customer trust, making them attractive targets for cybercriminals. As retailers become increasingly dependent on cloud services, third-party platforms, and external partners, their attack surface continues to expand. Attackers are increasingly using identity-based account takeover attacks to take over customer and employee accounts.
“For retailers, trust is the foundation before any transaction. Breaches put that trust at risk, with potentially lasting reputational harm and negative impacts on sales. The faster an organisation can investigate, communicate accurately, and demonstrate that it has contained the issue, the better positioned it is to maintain customer confidence and limit long-term reputational or commercial impact.
“Organisations should focus not only on determining the scope of any potential compromise, but also on validating the integrity of customer-facing systems and communications. Security strategies should verify not only access credentials but also the users, devices, and behaviours interacting with critical systems continuously.”
Claud Bilbao, VP, underwriting & distribution, Cowbell, said: “Two cyber incidents hitting major fashion retailers in a matter of days should be a wake-up call for the entire sector. There’s no evidence the attacks are connected, but cybercriminals don’t need to take a retailer offline to inflict serious damage. Stealing customer data, disrupting orders or undermining consumer confidence can be just as costly. And with Black Friday and Christmas approaching, attackers know that retailers face enormous pressure to keep trading. That commercial pressure can become a weapon in the hands of cybercriminals, particularly when they’re looking to extort a business.”
Muhammad Yahya Patel, vCISO and cybersecurity advisor for EMEA at Huntress, said: “Another week, another UK retailer dealing with a cyber incident. What’s confirmed is instructive enough without speculation. Several IT systems became unavailable. Websites were affected. Online orders placed from 11 October may be delayed. The fact that Inside Story and White Stuff within the same group were unaffected, and that TFG’s wider Africa and Australia operations were untouched, suggests some degree of system separation was in place. That separation, which limited the blast radius, is worth noting as a positive. The retail sector’s security problem in 2026 isn’t a lack of awareness. It’s the gap between what organisations know they should do and what they’ve actually done about it. That gap is exactly what attackers are measuring when they choose their next target.”
