[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

4 clusters · 19 sources · 9 days · First seen · Last updated

Cyberattacks on fashion retail companies

Overview

A series of cybersecurity incidents has targeted several major fashion retailers. On October 11, 2026, The Foschini Group (TFG) reported that its UK subsidiary, TFG London, experienced an attack affecting the IT systems of the Phase Eight, Hobbs, and Whistles brands. While TFG stated there was no immediate evidence that customer payment information was compromised, some website capabilities were impacted.

These events occurred alongside other significant breaches in the apparel industry. ASOS reported an unauthorized party accessing personal data, including names and contact details, on October 6, which necessitated mass password resets. Additionally, H&M has been investigating claims of being targeted by the cybercriminal group ShinyHunters.

By October 17, the scope of retail vulnerabilities appeared to be widening. TFG London continued its investigation into whether sensitive customer data was impacted, despite stores remaining operational. The incident is part of a broader trend where criminals exploit interconnected supply chains and remote management tools to bypass security.

On October 20, 2026, a service provider managing the online shop for the media outlet Valeurs actuelles was targeted. A hacker claimed to have published customer data, including names, postal addresses, email addresses, and encrypted passwords related to subscriptions and purchase invoices. The provider has since secured its systems and reset affected passwords. Experts have advised users to utilize password managers and remain vigilant against phishing attempts that mimic official brand communications.

Entities

ASOS · TFG London · The Foschini Group · Hobbs · Phase Eight

Timeline

  1. [TECHNOLOGY] 4 sources
    Cyberattacks target retailers and service providers

    Cyberattacks against brands like Hobbs, ASOS, and a service provider for Valeurs actuelles have exposed customer data, including contact details and encrypted passwords.

  2. [TECHNOLOGY] 2 sources
    Retailers face rising cyberattacks targeting data and supply chains

    Retailers including TFG London (Hobbs, Whistles) and ASOS face rising cyber threats targeting customer data and supply chains, causing significant operational disruptions and financial losses.

  3. [TECHNOLOGY] 3 sources
    Fashion retailers TFG London, ASOS, and H&M targeted by cyberattacks

    Major fashion retailers including TFG London, ASOS, and H&M have faced recent cyberattacks, highlighting the rising threat of AI-driven hacking and the importance of transparent consumer communication.

  4. [BUSINESS] 9 sources
    TFG London hit by cyber attack affecting Hobbs and Whistles

    TFG London reported a cyber attack affecting the Phase Eight, Hobbs, and Whistles brands. The company states payment data is not at risk, following recent breaches at ASOS and investigations at H&M.

Sources

cybernoz.com · europesays.com · globaldata.com · globalsecuritymag.com · globalsecuritymag.fr · independent.co.uk · info-lux.com · internetretailing.com.au · internetretailing.net · metro.co.uk · netcost-security.fr · retailtimes.co.uk · standard.co.uk · sundayworld.co.za · thecooldown.com · theindustry.fashion · therecord.media · theregister.com · valeursactuelles.com

This summary has been updated 2 times: see revision history