Customers contacted as precaution

TFG London, the owner of fashion brands Hobbs, Whistles and Phase Eight, has told customers that some personal data was accessed during a cyber attack earlier this month. Chief executive Justin Hampshire wrote to customers on 28 October, saying the business was contacting everyone as a precaution while its investigation continues. He stressed that being contacted does not necessarily mean an individual's information was affected.

What was, and was not, taken

Information potentially affected includes contact and delivery details, order information and, in some cases, limited payment information such as the last four digits of a payment card. The group said this does not include usable payment card details, and that it has found no evidence so far that account login information or passwords were accessed. Payment processing is handled by a third-party provider, and customers were told they do not need to take immediate action.

Investigation still open

The attack was identified on 11 October and affected IT systems used by the three brands. TFG London said it acted immediately to secure its systems, brought in independent cybersecurity specialists and notified the relevant authorities. Its other brands, White Stuff and Inside Story, were unaffected, as were its operations in Africa and Australia, which run on separate systems. The company said it will keep updating its online frequently asked questions page as the investigation establishes exactly what was accessed.

Sources: Retail Gazette | FashionUnited