TFG London (Foschini Group): cybersecurity incident detected 11 October disrupts IT systems at Phase Eight, Hobbs and Whistles; stores trading; TFG Australia and TFG Africa run on separate systems and are not affected
The Foschini Group told JSE shareholders on 13 October 2026 that its UK business, TFG London, identified a cybersecurity incident on 11 October affecting some IT systems for its Phase Eight, Hobbs and Whistles brands. Inside Story and White Stuff are not affected. TFG activated its incident response and business continuity plans, engaged external specialists to contain the incident and reported it to the relevant UK authorities. Stores remain open and trading although several IT systems are still unavailable. The group says TFG Africa and TFG Australia run on separate systems and are not affected. It is still working out whether personal or other sensitive information was compromised and will notify affected people or organisations if so. BleepingComputer found no public claim by a threat actor.
- Product
- TFG London retail IT systems (Phase Eight, Hobbs, Whistles)
- Versions
- n/a — incident
- Exploited in Australia?
- unknown
- Patch to
- Phase Eight, Hobbs and Whistles customers: watch for phishing that mentions recent orders or accounts, and wait for TFG London's notice before assuming data was taken. Retailers: check that brand IT estates are segmented as TFG describes, and rehearse store trading with core systems down.
Primary: The Foschini Group JSE SENS announcement — Cybersecurity incident at TFG London (13 Oct 2026) · BleepingComputer — TFG London cyberattack disrupts systems at Hobbs and Whistles retailers (13 Oct 2026)