Phase Eight and Hobbs owner hit by cyber-attack, H&M probes hack
TFG London investigates an IT incident affecting Phase Eight, Hobbs and Whistles, while H&M probes separate claims from ShinyHunters.
Stock photo for illustration only, not from the actual event
- TFG London confirms an IT security incident impacting Phase Eight, Hobbs, and Whistles brands
- H&M investigates separate claims of a cyber-attack linked to the hacking group ShinyHunters
- Cyber experts warn major fashion retailers are increasingly targeted by ransomware groups
- The incidents follow a recent high-profile app notification breach affecting Asos customers
The parent company behind high-end fashion brands Hobbs, Whistles, and Phase Eight has announced it is investigating a cyber-security incident that began over the weekend, affecting several internal IT systems.
According to TFG London—the UK division of retail conglomerate The Foschini Group—the disruption was identified on Sunday and specifically impacted their Phase Eight, Hobbs, and Whistles retail operations. The company stated it is actively investigating the breach alongside external cyber security specialists.
Stock photo for illustration only, not from the actual event
Meanwhile, Swedish fashion giant H&M is probing separate claims that it was targeted by a notorious cyber-criminal collective known as ShinyHunters. The hacking group has previously been linked to high-profile security breaches involving organizations such as the FBI, Rockstar Games, and Ticketmaster.
H&M reportedly informed customers via email that preliminary investigations have found no indications that its core data environment has been compromised or that payment information was affected. However, the company is continuing its forensic review to determine whether any sensitive customer details were accessed.
"Fashion giants ranging from Adidas to Alexander McQueen have been targeted by cyber-criminals seeking to extort money by threatening to release customer data unless they are paid a ransom."
Beverley Griffiths, senior lecturer in security and resilience at Bucks New University
The email, reviewed by news service PA, also noted that individuals whose personal data was compromised would be notified directly. The retailer added that it currently deems it unnecessary for users to modify their account login credentials.
Security Insight and Context: The surge of coordinated cyber-attacks targeting major retail and fashion conglomerates—including TFG London, H&M, and Asos—highlights a growing trend where threat actors leverage consumer databases for high-stakes extortion. As retailers digitize their operations and mobile applications, securing endpoints and customer-facing notification channels has become an urgent industry-wide challenge.
Charlotte Wilson, head of enterprise at cyber-security firm Check Point, remarked that the wave of retail-focused cyber-attacks was "starting to look rather like buses... you wait for one, and suddenly three come along at once."
This wave of incidents comes on the heels of a security breach at online fashion retailer Asos, where customers were alerted via push notifications on their mobile screens that the platform had been breached by a different hacker group. Cyber-security experts noted that utilizing app notification systems as impromptu ransom notes was an unprecedented tactic, with subsequent updates revealing that hackers had accessed deeper personal details than initially disclosed.
Source: BBC Business
Found something wrong in this article? Report an issue with this article
Comments
Leave a Comment