The owner of fashion brands Phase Eight, Hobbs, and Whistles has confirmed it was the latest retail group to experience a cyberattack, raising renewed concerns about cybersecurity vulnerabilities in the sector. The Foschini Group (TFG), a South African multinational, said it detected a “cybersecurity incident” on Sunday affecting its UK subsidiary, TFG London. The attack impacted IT systems related to the three UK brands, while other group-owned retailers such as Inside Story and White Stuff were reportedly unaffected.

TFG London stated that physical stores remained open and operational, but some IT systems were still unavailable, leading to a temporary suspension of online orders as a precaution. The company added that orders placed before 11 October are being processed as normal, but orders placed afterward may experience delays. Returns currently can only be made in-store, with postal returns under review.

The group emphasized that payment processing is handled by a third-party provider and said there was “no reason to believe that payment information is at risk.” An investigation is underway to determine whether any personal or sensitive customer information was compromised. TFG has engaged external cybersecurity experts and reported the incident to relevant UK authorities. The company also indicated that its African and Australian operations run on separate systems and are not affected.

This incident follows closely on the heels of a cyberattack on online fashion retailer Asos earlier last week, in which an unauthorized party accessed customer names, addresses, and recent search data. The Asos breach reportedly involved hackers identifying themselves as the Xuanye group and initially claimed to have exploited Snowflake, a US-based data storage company used by Asos. However, Snowflake has since denied any vulnerability in its platform.

In addition to the UK fashion retailers, the Swedish apparel giant H&M is investigating potential cyber threats, though so far it has found no evidence of data compromise. Meanwhile, a separate cyberattack recently hit French supermarkets, where hackers remotely manipulated refrigeration systems, raising food temperatures to damaging levels and causing significant financial losses.

Cybersecurity specialists warn that retailers remain prime targets due to the valuable personal data they hold and their reliance on interconnected networks of payment systems, suppliers, and third-party providers. Marijus Briedis, chief technology officer at digital security firm NordVPN, described the latest attacks as a "recurring nightmare" and a clear indication that the retail sector remains vulnerable.

Industry experts and officials have urged businesses to strengthen cyber defenses and consider comprehensive cyber insurance to mitigate risk. Jonathan Ellison, director for national resilience at the UK’s National Cyber Security Centre, called for urgent collective action to protect businesses of all sizes.

Customers are advised to remain vigilant for suspicious communications following the breaches. Beverley Griffiths, a senior lecturer in security and resilience, recommended caution around unexpected messages and deviations from normal service.

These events underscore ongoing concerns about the retail sector’s exposure to cyber threats, with several high-profile incidents over the past year—including attacks on Marks & Spencer, the Co-op, Jaguar Land Rover, and Harrods—demonstrating the significant operational and financial risks posed by such events.