According to a report published by BBC News Technology on October 13, 2026, fashion retail conglomerate TFG London has launched an emergency investigation following a cyberattack that impacted core information technology infrastructure across its brand portfolio.
TFG London—the British subsidiary of South Africa-based The Foschini Group—confirmed that malicious activity was detected on Sunday. The incident specifically degraded internal systems supporting high-street apparel labels Phase Eight, Hobbs, and Whistles. While brick-and-mortar storefronts remained operational, digital web platforms experienced functional degradation. The group stated that external cybersecurity specialists had been retained to contain the breach and assess potential exfiltration of sensitive consumer records.
The breach coincides with an active inquiry by multinational clothing giant H&M into extortion claims published online by the cybercrime syndicate ShinyHunters. The hacking group—previously implicated in high-profile breaches targeting Ticketmaster, Santander, and federal infrastructure—claimed to have gained access to corporate systems, though H&M stated that preliminary forensics had identified no unauthorized data compromises.
Cybersecurity analysts highlighted the accelerating pace of supply chain intrusions across European retail. Just one week earlier, online retailer Asos suffered an unprecedented breach in which attackers hijacked mobile application push notification mechanisms to broadcast extortion demands directly to consumer smartphones. Concurrently, French supermarkets sustained cooling controller firmware attacks that spoiled millions of euros in perishable food inventories.
Security resilience experts pointed out that retail IT architectures remain uniquely exposed due to legacy integrations between e-commerce catalog microservices and third-party logistics tracking. TFG London informed customers via email that payment processing pipelines appeared uncompromised, but the full extent of customer personal data accessed during the intrusion remains under technical investigation.