← TFG London

2026 TFG London — cyberattack on Phase Eight, Hobbs and Whistles systems; company says customer contact, delivery and purchase data may have been accessed

2026 Unknown records affected Share on X

Data compromised

Per the company's email to customers, as reported by FashionUnited: contact and delivery details, purchase records, and in some cases partial payment information such as the last four card digits. The company says this does not include usable payment card details, and says it has found no evidence that login details or passwords were accessed, subject to the ongoing investigation. It stresses that "this does not mean that your information was affected." The number of people affected has not been stated. The company says it is contacting all customers as a precaution.

Technical writeup

The FashionUnited article quotes only a few lines of the company email directly; the data-type details are its paraphrase. The article is dated October 29 by its URL, and it gives no explicit date for the email. The Ransomhouse listing is a leak-site entry only.

Root cause

TFG London identified the intrusion on October 11, 2026 and disclosed it on October 13. It says some IT systems used by Phase Eight, Hobbs and Whistles were hit, which disrupted trading and online orders (Whistles paused online orders for a time). Inside Story and White Stuff were not affected. The company has not named an attacker or the entry point. No group had publicly claimed the attack as of mid-October, per BleepingComputer. A Ransomhouse leak-site listing for TFG London dated November 4, 2026 appears on ransomware.live; the sources reviewed do not confirm it.

References

Breaches you may like