Hobbs, Whistles and Phase Eight owner confirms personal data accessed in cyber-attack

TFG London, the owner of Hobbs, Whistles and Phase Eight, has confirmed that some personal data was accessed during a cyber-attack earlier this month, as an investigation into the incident continues.

In an email sent to customers on Wednesday, first reported by Drapers, chief executive Justin Hampshire said the group was contacting all customers as a precaution following the attack on October 11. The business is still working to establish exactly which information was affected.

“We are contacting all of our customers as a precaution,” the email said. “This does not mean that your information was affected, and our investigation into exactly which information has been accessed is continuing.”

Information potentially affected includes contact and delivery details, order information and, in some cases, limited payment information, such as the last four digits of a payment card. TFG London stressed that this does not include “useable payment card details”.

The group said it had not found evidence that account login information or passwords had been accessed. That finding remains subject to its ongoing investigation.

Customers do not need to take any “immediate action”, according to the company, but were advised to remain alert to unexpected emails, phone calls or text messages seeking further information.

The attack previously disrupted trading at the group’s fashion brands, with Whistles temporarily pausing online orders in the days after the incident, according to the supplied reporting. Inside Story and White Stuff, which are also owned by TFG London, were not affected.

TFG London said it would continue to update its online FAQ page as further information became available. “We are very sorry for any worry this incident may cause, and we thank you for your understanding,” the customer email concluded.

This article was written with the assistance of AI.