Hobbs and Whistles owner struck by cyber attack
South African retail group The Foschini Group (TFG) said it became aware of the “cybersecurity incident” on Sunday, affecting its UK subsidiary TFG London, with “certain of its IT systems” impacted – specifically its Phase Eight, Hobbs and Whistles brands.
asserted
certain → strike → systems
But it said there is “no reason to believe that payment information is at risk”.
asserted
information → say → risk
TFG said it had reported the incident to the relevant UK authorities.
asserted
it → say → authorities
It also said its operations in TFG Africa and TFG Australia were not affected.
asserted
operations → say → Africa
It comes a week after fast fashion business Asos said an “unauthorised party” had gained access to some personal data, including names and contact details.
asserted
party → come → names
Snowflake later said the breach was not caused by a vulnerability or flaw with its platform.
asserted
breach → say → platform
On Monday, it was reported that H&M was investigating claims it was targeted by a cybercriminal last week.
uncertain
it → report → cybercriminal
The Swedish fashion giant said it was looking into a potential cybersecurity incident made by a group called Shinyhunters, The Times reported.
asserted
Times → say → group
Customers who placed an order with Phase Eight, Hobbs or Whistles before Sunday were told their purchase would be processed and delivered as normal.
asserted
purchase → place → Sunday
TFG London said there could be delays in orders placed after Sunday, but added there was no need to resubmit anything.
uncertain
London → say → anything
The subsidiary said returns could be made in stores, adding it was working on a solution for postal returns and would keep customers informed.
uncertain
it → say → customers
The hack was reported to the Information Commissioner’s Office (ICO), the UK’s independent data watchdog, which said it was “assessing the information provided”.
asserted
it → report → information
Read More
Organisations must report personal data breaches to the ICO within 72 hours of becoming aware of them, unless they do not pose a risk to people’s rights and freedoms.
asserted
they → read → rights
TFG London said: “On Sunday, 11 October, TFG London identified a cybersecurity incident affecting some of our IT systems, specifically impacting our Phase Eight, Hobbs, and Whistles brands.
asserted
London → say → brands
“We are actively investigating and working with external cyber security specialists.
asserted
We → investigate → specialists
“Stores are open as normal but some of our brand’s website capabilities may not be available as the investigation continues.
uncertain
investigation → continue → capabilities
“We apologise for any disruption and will provide additional updates to our customers as appropriate.”
asserted
We → apologise → customers
TFG London first entered the UK market in 2015 after buying Phase Eight, and has since added womenswear brands Whistles and Hobbs, homeware brand Inside Story and lifestyle brand White Stuff to its portfolio.
asserted
London → enter → portfolio
Headquartered in London, the subsidiary counts more than 3,000 employees and operates across the UK, Europe, America and Asia.
asserted
subsidiary → count → UK
Lisa Barber, Which? tech editor, said: “Shoppers will be deeply concerned to learn of these latest security breaches, particularly coming so soon after the Asos hack.”
asserted
Shoppers → say → hack
She added: “In this climate of more frequent and high-profile hacks, consumers should remain vigilant about security and ensure they use strong, unique passwords for each of their accounts and enable two-factor authentication wherever possible.”
asserted
they → add → authentication
Beverley Griffiths, senior lecturer in security and resilience at Bucks New University, said: “This is the second UK retailer to be hit in a week and it’s a clear sign that major brands are firmly in the crosshairs of cyber attackers.
asserted
brands → say → attackers
“No organisation is immune, so the real test of resilience is how quickly a business can detect an incident, respond and recover while keeping its customers informed.”
asserted
business → detect → customers
She added customers should remain vigilant and be wary of unexpected messages.
asserted
customers → add → messages
Jonathon Ellison, director for national resilience at the National Cyber Security Centre (NCSC), said in a post on LinkedIn: “The real-world consequences of cyber attacks can be shocking but they should be no revelation – malicious actors can and do inflict harm on businesses and individuals every day.”
asserted
actors → say → businesses
He added: “The NCSC is engaging with the retail sector through our existing trusted networks to promote sharing insights and strengthening cyber resilience.
“Our collective response has to be urgent: all organisations must take action to bolster their cyber defences – whether they are small start-ups or huge multinationals.
“We strongly advise following the advice on the NCSC website to help safeguard your operations, finances and reputation.”
asserted
We → add → operations
The Aporia
