Urgent.News

What's breaking now, across thousands of outlets.

Tech

Hobbs and Whistles owner investigates hack that may have exposed customer data

Cyber-attack on TFG London comes less than a week after online fashion seller Asos was hit by hackers Business live – latest updates The owner of Phase Eight, Hobbs and Whistles has warned that its websites and IT systems have been hit by a cyber-attack that may have compromised customers’ personal data. The South-African listed TFG London said that it had identified the “cybersecurity incident”…

Hobbs and Whistles owner investigates hack that may have exposed customer data

Phase Eight, the owner of retail chains Hobbs and Whistles, has reported a cybersecurity incident that may have compromised customers' personal data. The South-African-listed company confirmed the attack on Sunday, affecting its UK-based retail chains Hobbs and Whistles, Inside Story, and White Stuff, while its other stores remain unaffected. TFG reported that its stores have stayed open and operating but some IT systems remain unavailable, and all online orders have been paused as a precautionary measure.

The investigation into the incident is ongoing to determine if any personal or sensitive information has been accessed by hackers. If such information is found to be compromised, TFG intends to notify affected individuals or organizations. The company has engaged external cybersecurity specialists to contain the issue and has reported the incident to the relevant UK authorities.

This attack follows a similar incident less than a week prior, where online fashion retailer Asos had its customers' names, addresses, and recent search data accessed by hackers. H&M is also currently investigating claims of a potential attack on its systems, but the retailer stated that it has not found evidence of its data environment being compromised.

The recent wave of cyber-attacks has raised concerns among industry experts, particularly targeting the retail sector. Marijus Briedis, chief technology officer at NordVPN, a digital security firm, emphasized that retailers, due to their extensive network of payment systems, suppliers, and third-party technology providers, are especially attractive targets for hackers. These attacks are becoming increasingly frequent and sophisticated, exploiting stolen credentials, human error, and security gaps.

Written by urgent.news from Guardian Business's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

This story

This is one outlet's version. Read the fullest account.

Read the original at theguardian.com →

More in Tech

Dependency Cooldowns: Make Your Package Manager Wait Before It Trusts New Code

Most npm supply-chain attacks follow the same script. Someone phishes a maintainer or steals a publish token, pushes a poisoned patch release, and then waits for every ^1.2.3 range on the planet to…

  • Dependency cooldowns prevent rapid installation of compromised versions
  • Different package managers handle cooldowns with varying config keys and time units
  • Teams must manage edge cases like transitive dependencies and false positives

More from Tuesday 13 October →