Foschini Group probes cyberattack on UK fashion brands Phase Eight, Hobbs and Whistles

The Foschini Group (TFG), a Cape Town-based clothing retailer, is investigating a cyberattack that disrupted IT systems at three British fashion brands run by its UK division, TFG London, The Record reported on October 13, 2026. According to the outlet, the company disclosed the incident on Tuesday after discovering it the previous Sunday. The affected brands are Phase Eight, Hobbs and Whistles, and the attack is the latest in a series of cyber incidents hitting retailers in the UK and Europe.

What happened

According to The Record, the attack left some services at the three brands unavailable. Stores remained open, but several IT systems were still offline while specialists worked to establish the scope of the breach. TFG said it had reported the incident to the relevant UK authorities, was working with cybersecurity specialists, and disclosed the matter to investors through the Johannesburg Stock Exchange's news service.

The report says two other TFG London brands, Inside Story and White Stuff, were not affected. TFG's operations in South Africa and Australia were also unaffected because they run on separate IT systems, the company said.

Who is affected

In an email to customers cited by The Record, TFG warned that orders placed around the time of the incident could be delayed and advised shoppers not to submit duplicate orders. The company said payments are processed by an external provider and it has no reason to believe payment information is at risk. TFG also told customers they do not need to change their account passwords at this stage and said it will notify affected customers or organizations if the investigation finds that sensitive information was compromised.

TFG has not identified the attackers, explained how they gained access, or confirmed whether personal data was taken. The Record's report does not mention any ransomware group or other party claiming responsibility.

Background

The Record notes that TFG's online sales were already affected earlier in 2026 by a cyber incident involving a key online concession partner, which the company disclosed in its June financial results; TFG London reported a drop of more than 65% in earnings, with that incident cited as a factor. According to the outlet, there is no indication that the earlier disruption is connected to the new attack.

The incident follows a run of attacks on retailers, including ASOS earlier in October and Levi Strauss & Co and De Bijenkorf in August, as well as 2025 incidents at Marks & Spencer, Harrods, the Co-op Group and others, The Record said.

What to do

Customers of Phase Eight, Hobbs and Whistles should watch for official notifications from TFG and be cautious of unsolicited emails, texts or calls referencing recent orders, as high-profile retail incidents are often followed by phishing attempts.