Phase Eight owner TFG London investigates cyber-attack; H&M probes hack claim

TFG London, the UK arm of retail conglomerate The Foschini Group, said it identified an incident on Sunday affecting some IT systems and "specifically impacting our Phase Eight, Hobbs, and Whistles brands". The company told BBC News in a statement that it is "actively investigating and working with external cyber security specialists". It said its brands' stores are operating as normal but some website capabilities may be unavailable.

In an email seen by the news service PA, TFG told customers it did not believe their payment information had been affected. The email said the company would work to identify whether any sensitive customer information was impacted, and that affected customers would be informed directly. "We do not believe it is necessary to change your account login information at this time," it said.

Separately, the BBC reported on Monday that H&M is investigating a claim it was attacked by a cyber-criminal group called ShinyHunters. The BBC reported the group has previously been linked to attacks targeting the FBI, Rockstar Games and Ticketmaster. H&M told BBC News: "We are aware of information circulating online regarding a potential cyber security incident and are currently investigating the claims." It added: "At this time, we have not found any indications that our data environment has been compromised."

The reports come a week after Asos customers were informed the online fashion and beauty retailer had been hacked by another group, via a push notification appearing on their phone screens. Cyber-security experts told the BBC it was an unprecedented move for hackers to effectively transform an app notification system into a "ransom note".

Beverley Griffiths, senior lecturer in security and resilience at Bucks New University, told PA the incident was "a clear sign that major brands are firmly in the crosshairs of cyber attackers", adding that customers should stay "vigilant" and wary of suspicious messages. Charlotte Wilson, head of enterprise at cyber-security firm Check Point, told the BBC that attacks targeting retailers were "starting to look rather like buses... you wait for one, and suddenly three come along at once". She said it was too soon to ascertain how the TFG London incident occurred or whether it was related to other recent hacks, but that "the retail industry has some serious questions to answer about how exposed its systems have become".