# Cyberattacks on fashion retail companies

> Live situation record from CLSTR: https://clstr.news/situations/cyberattacks-on-fashion-retail-companies
> Updated: 2026-10-21T09:43:32.000Z. Sources: 19. Developments: 4.

A series of cybersecurity incidents has targeted several major fashion retailers. On October 11, 2026, The Foschini Group (TFG) reported that its UK subsidiary, TFG London, experienced an attack affecting the IT systems of the Phase Eight, Hobbs, and Whistles brands. While TFG stated there was no immediate evidence that customer payment information was compromised, some website capabilities were impacted.

These events occurred alongside other significant breaches in the apparel industry. ASOS reported an unauthorized party accessing personal data, including names and contact details, on October 6, which necessitated mass password resets. Additionally, H&M has been investigating claims of being targeted by the cybercriminal group ShinyHunters.

By October 17, the scope of retail vulnerabilities appeared to be widening. TFG London continued its investigation into whether sensitive customer data was impacted, despite stores remaining operational. The incident is part of a broader trend where criminals exploit interconnected supply chains and remote management tools to bypass security.

On October 20, 2026, a service provider managing the online shop for the media outlet Valeurs actuelles was targeted. A hacker claimed to have published customer data, including names, postal addresses, email addresses, and encrypted passwords related to subscriptions and purchase invoices. The provider has since secured its systems and reset affected passwords. Experts have advised users to utilize password managers and remain vigilant against phishing attempts that mimic official brand communications.

## Timeline

### 2026-10-21: Cyberattacks target retailers and service providers

Cyberattacks against brands like Hobbs, ASOS, and a service provider for Valeurs actuelles have exposed customer data, including contact details and encrypted passwords.

4 sources. https://clstr.news/cluster/cyberattacks-target-retailers-and-service-providers

### 2026-10-17: Retailers face rising cyberattacks targeting data and supply chains

Retailers including TFG London (Hobbs, Whistles) and ASOS face rising cyber threats targeting customer data and supply chains, causing significant operational disruptions and financial losses.

2 sources. https://clstr.news/cluster/retailers-face-rising-cyberattacks-targeting-data-and-supply-chains

### 2026-10-14: Fashion retailers TFG London, ASOS, and H&M targeted by cyberattacks

Major fashion retailers including TFG London, ASOS, and H&M have faced recent cyberattacks, highlighting the rising threat of AI-driven hacking and the importance of transparent consumer communication.

3 sources. https://clstr.news/cluster/fashion-retailers-tfg-london-asos-and-hm-targeted-by-cyberattacks

### 2026-10-12: TFG London hit by cyber attack affecting Hobbs and Whistles

TFG London reported a cyber attack affecting the Phase Eight, Hobbs, and Whistles brands. The company states payment data is not at risk, following recent breaches at ASOS and investigations at H&M.

9 sources. https://clstr.news/cluster/tfg-london-hit-by-cyber-attack-affecting-hobbs-and-whistles

---
Cite as: Cyberattacks on fashion retail companies. CLSTR, https://clstr.news/situations/cyberattacks-on-fashion-retail-companies