Phase Eight, Hobbs, Whistles breach adds to fashion retailer hacks

TFG London, the UK arm of South African retailer The Foschini Group, announced on 14 October 2026 that a cyberattack compromised some of its IT systems on 11 October. The breach affects the online and in‑store operations of the three UK fashion brands Phase Eight, Hobbs and Whistles.

The company said the intrusion hit specific internal servers that store customer information. While TFG London has not disclosed the exact data exposed, it confirmed that personal details such as names, email addresses and possibly payment information could be involved. Customers who have made purchases or created accounts with any of the three brands are advised to treat any unexpected communication with caution.

Hackers typically exploit vulnerabilities in corporate networks to gain access to databases containing customer records. Once inside, they may copy data or install malicious code that could be used later for phishing attacks or identity theft. The report did not indicate whether the attackers have already used the stolen information.

TFG London has begun an investigation with forensic specialists and has taken steps to isolate the affected systems. The firm is notifying affected customers via email and will provide guidance on monitoring accounts. It also urges anyone who notices suspicious activity to contact their bank or card issuer promptly.

Readers can protect themselves by changing passwords for any accounts linked to Phase Eight, Hobbs or Whistles, especially if the same password is used elsewhere. Using a unique, strong password for each service reduces the risk of credential stuffing attacks. ComputerScams.com offers a free password strength checker to help evaluate how secure a new password is. Monitoring credit reports and setting up fraud alerts can also limit the damage from potential identity theft.

If you receive an email that appears to be from one of the fashion brands asking for personal details, verify the sender by checking the official website or contacting customer service directly. Do not click links or download attachments from unsolicited messages. The free email checker on ComputerScams.com can help identify suspicious domains.

In the aftermath of this breach, the most immediate action you can take is to update your passwords and enable two‑factor authentication wherever possible.

Source: Read the original report