TFG London, the owner of Phase Eight, Hobbs, and Whistles, has confirmed that its websites and IT systems were hit by a cyber-attack that may have compromised customer data. The South African-listed company identified the cybersecurity incident at its three UK-based retail chains on Sunday.
The attack comes less than a week after online fashion seller Asos was hit by hackers. TFG stated that its two other UK brands, Inside Story and White Stuff, are not affected. Its operations in Africa or Australia run on separate systems and remain unaffected.
TFG London cyber-attack impact on operations
TFG said its stores had stayed open and trading continued, but some of its IT systems remain unavailable. The company paused all online orders as a precautionary measure. An investigation is ongoing to establish whether any personal or other sensitive information has been compromised.
If the investigation establishes that any personal information has been accessed by hackers, TFG said it would notify affected individuals or organisations. The company engaged external cybersecurity specialists to contain the incident, which has been reported to the relevant UK authorities.
Some of the brand’s website capabilities may not be available as the investigation continues. TFG apologised for any disruption and said it would provide additional updates to customers as appropriate.
UK retail sector under siege
The attack on the three UK fashion brands follows a wave of cyber incidents targeting British retailers. Asos reported that the names, addresses, and recent search data of millions of customers were accessed in its breach. H&M said on Monday that it was also investigating claims that its systems had been attacked, though the fast fashion retailer stated it had not found any indications that its data environment had been compromised.
Several other British retailers, including Marks & Spencer, the Co-op, and Harrods, were hit by damaging cyber incidents last year. Marks & Spencer and the Co-op faced stock shortages, and the former was forced to shut down its website for several weeks while it ensured its systems were clean.
Marijus Briedis, the chief technology officer at the digital security firm NordVPN, said the latest attack on TFG London is another reminder that the retail sector is firmly in hackers’ sights. He noted that retailers are particularly attractive targets because they hold valuable customer information and rely on a sprawling network of payment systems, suppliers, and third-party technology providers.
Briedis added that every connection is a potential weak point, and attackers are increasingly adept at exploiting stolen credentials, human error, and gaps in security. He stated that these attacks are becoming a recurring nightmare for businesses, and there is every reason to believe more incidents are likely to occur.
Source: The Guardian
