TFG London and H&M investigate cyber security incidents

TFG London, owner of Hobbs, Whistles and Phase Eight, and Swedish fashion retailer H&M Group are investigating separate cyber security incidents, adding to growing concerns over attacks targeting the fashion industry ahead of the peak trading season.

TFG London identified an incident affecting some of its IT systems on Sunday, specifically impacting the three fashion brands. The company said it was working with external cyber security specialists to investigate.

Its stores continue to operate normally, however, some website functions may be unavailable. TFG reportedly told customers it did not believe payment information had been impacted, yet it is investigating whether other sensitive personal data was accessed.

Similarly, H&M is investigating claims by hacking group ShinyHunters that it had been targeted. The retailer told the BBC it had found no indication that its data environment had been compromised.

The incidents follow an attack on Asos last week, which confirmed that an unauthorised notification had been sent to customers through third-party communication platforms. The retailer said names and contact details may have been compromised, while payment-card information and passwords were not believed to have been affected.

In a statement to FashionUnited, Claud Bilbao, vice president of underwriting and distribution at cyber insurance firm Cowbell, said the incidents should serve as a warning to the sector. With Black Friday and Christmas approaching, Bilbao noted that disruption to orders, theft of customer data and damage to consumer confidence could prove costly even without a retailer being taken offline.

“[That] commercial pressure can become a weapon in the hands of cybercriminals, particularly when they're looking to extort a business,” he added.

The recent cases add to wider scrutiny of retail cyber security, with companies including Marks & Spencer, Adidas, Nike and Under Armour also linked to cyberattack claims or investigations in recent months.