TFG London, the owner of Phase Eight, Hobbs and Whistles, has confirmed that "some personal data" was accessed after a cyber attack earlier this month. The company said its IT systems were impacted following a "cybersecurity incident" on October 11, though its other brands, including Inside Story and White Store, were not affected.
Investigation and Customer Notification
In an email to customers, CEO Justin Hampshire said the company is "contacting all of our customers as a precaution" after an investigation revealed that "some personal data has been accessed." The email, seen by Drapers, adds: "This does not mean that your information was affected, and our investigation into exactly which information has been accessed is continuing."
The email states: "The information affected could include contact and delivery details, order information, and in some cases limited payment information, such as the last four digits of a payment card. It does not include usable payment card details."
Advice to Customers and Wider Context
Customers are urged to be wary of unexpected calls, emails or text messages. The message continued: "The information affected could potentially be used to make scam or phishing communications appear more convincing, for example by referring to information about an order you have placed."
The incident follows a cyber attack on ASOS, where customers were notified that the retailer had been hacked, with claims that data storage firm Snowflake had been compromised. ASOS later confirmed that an "unauthorised party" had gained access to some personal data, including names and contact details.
Meanwhile, H&M was investigating claims earlier this month that it was targeted by a cybercriminal. The Swedish fashion giant said it was looking into a potential cybersecurity incident made by a group called Shinyhunters, The Times reported. Shinyhunters previously claimed it was behind a major cyber attack on Jaguar Land Rover last summer, along with other hacking groups known as Scattered Spider and Lapsus.
