The owner of Hobbs, Whistles and Phase Eight has contacted its customers following a cyber security incident earlier this month and urged them to be alert to unexpected emails, calls or text messages.

TFG London - the UK arm of retail conglomerate The Foschini Group - identified an incident on Sunday, 11th October affecting some IT systems and specifically impacting the Phase Eight, Hobbs, and Whistles fashion brands.

In an email sent to customers, dated 28th October, TFG London CEO Justin Hampshire said: "On identifying a cybersecurity incident affecting some of our IT systems, we acted immediately to secure our systems, brought in independent cybersecurity experts, and notified the relevant government authorities."

He added: "Unfortunately, our investigation has shown that some personal data has been accessed, and we wanted to contact you about this as soon as we could. We are contacting all of our customers as a precaution. This does not mean that your information was affected, and our investigation into exactly which information has been accessed is continuing."

The information affected could include contact and delivery details, order information, and in some cases limited payment information, such as the last four digits of a payment card. It doesn't include useable payment card details.

"Our investigation has not identified any evidence that account login information or passwords were accessed," Hampshire said. "Importantly, payment processing is carried out by a third-party provider and shopping on our website and in our stores remains secure. You do not need to take any immediate action."

"However, as a precaution, we recommend being alert to unexpected emails, calls or text messages. The information affected could potentially be used to make scam or phishing communications appear more convincing, for example by referring to information about an order you have placed. As a reminder, Phase Eight will never ask you to provide your password or full payment card details by email, text or phone."

Hampshire concluded his email by stating that his company's investigation is continuing and it will keep its FAQ page updated with any new and relevant information.

"We are very sorry for any worry this incident may cause, and we thank you for your understanding," he stated.

2026 RTIH Innovation Awards

Cyber security will be a key focus area at the 2026 RTIH Innovation Awards.

The awards, which celebrate global retail technology innovation in a fast moving omnichannel world, have now closed for entries. Our winners will be revealed at the 2026 RTIH Innovation Awards Ceremony, taking place at The HAC in Central London on Wednesday, 4th November.

Check out our 2026 shortlists and finalists here.

We received a record number of entries this year and many fantastic examples of technology excellence driving transformative change across the global retail sector.

Congratulations to all those who made it through the initial submission process! It’s now over to our star studded judging panel who will decide the winners to be announced at the 2026 RTIH Innovation Awards Ceremony, taking place at The HAC in Central London. 

The event will be held on Wednesday, 4th November and consist of a drinks reception, three course meal, awards ceremony presided over by award winning stand-up comedian, presenter, actor and broadcaster, Aurie Styla, and after party until 1am.

Click here to book your place at the 2026 RTIH Innovation Awards Ceremony on Wednesday, 4th November.