Skip to content
Welcome, thoughtbot's Giant Robots listeners!Start here
TFG London
AI-generated illustration
OrganisationGB

TFG London

British fashion Arm of The Foschini Group, owner of Phase Eight, Hobbs and Whistles.

On 11 October, a cyberattack disrupted systems at TFG London, the British fashion Arm behind Phase Eight, Hobbs and Whistles, while shops stayed open.

Last refreshed: 22 October 2026 · Appears in 1 active topic

Key Question

How far did the attack spread across TFG London's five brands?

Timeline for TFG London

#15 13 Oct

Foschini Group attack hits TFG London

Cybersecurity: Threats and Defences
View full timeline →

Background

TFG London is the British fashion Arm of South Africa's The Foschini Group. It owns the Phase Eight, Hobbs and Whistles brands, placing several United Kingdom fashion businesses under the same international retail parent.

The Foschini Group discovered an attack affecting TFG London on 11 October 2026 and disclosed it two days later. The incident disrupted information-technology systems at the British Arm, but its shops remained open. TFG London had not named an attacker when the event was reported. The contrast between continuing store trade and unavailable systems shows that the incident affected the group's digital operations without forcing its physical retail network to close.

Common Questions
What is TFG London?
TFG London is The Foschini Group's British retail Arm. It includes Phase Eight, Whistles, Hobbs, Inside Story and White Stuff.Source: TFG London
Which TFG London brands were affected by the cyberattack?
TFG said systems used by Phase Eight, Hobbs and Whistles were affected. Inside Story and White Stuff were not affected.Source: JSE SENS
Were TFG London stores open during the cyberattack?
Yes. TFG said its London stores remained open and trading, although several IT systems were unavailable.Source: JSE SENS
Was TFG London customer data compromised?
TFG said the investigation had not established whether personal or sensitive information was compromised. It said affected people or organisations would be notified if compromise was confirmed.Source: JSE SENS
Source Material

Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Updated 22 October 2026. Editorial standards.