Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

The Foschini Group (TFG), owner of Hobbs and Whistles, reported a cybersecurity incident affecting its UK operations, including those brands and Phase Eight. As of Reuters’ October 13, 2026 report, certain IT systems were disrupted and several systems remained unavailable. Whether personal or other sensitive information was compromised was still under investigation; no customer-data breach had been confirmed.

What happened to Hobbs and Whistles’ owner?

TFG, a South African fashion retailer, said its UK operations detected a cybersecurity incident over the weekend before the October 13, 2026 report. Reuters reported that the affected UK operations included Phase Eight, Hobbs and Whistles. TFG said certain IT systems were disrupted, with several systems across its UK operations still unavailable when Reuters reported the incident. Reuters reporting via StreetInsider and Reuters reporting via KSL.com named the same brands and incident.

The timing phrase “over the weekend” is relative to that report; it does not establish a precise incident date. The reported status is a snapshot from October 13, not confirmation of current system availability or later developments.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Which brands, regions and systems were affected?

  • UK operations: TFG reported disruption to certain IT systems, and several systems remained unavailable at reporting time. The reports do not identify which systems or services were affected.
  • Named UK brands: Phase Eight, Hobbs and Whistles were included in the reported scope. The reports do not specify whether any brand’s public website, online checkout, stores, or customer support services were unavailable.
  • Africa and Australia: Reuters said TFG’s operations in those regions were unaffected at the time. That statement is limited to the scope reported then and does not guarantee the status of every part of the international business or later developments.

Was customer or personal information compromised?

That remained unknown in the October 13 reporting. TFG was investigating whether personal or other sensitive information had been compromised. The reports do not establish that information was accessed, stolen, or exposed, so it would be inaccurate to call this a confirmed customer-data breach.

They also do not say whether customer accounts, payment details, employee information, or other specific data types were involved. Anyone concerned should rely on a direct notice from TFG or the relevant brand for any confirmed, individual guidance rather than infer exposure from the system disruption alone.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What response did TFG report?

TFG London had engaged external cybersecurity specialists to contain the incident and informed all relevant UK authorities, according to Reuters. This describes the reported response; it does not establish that containment or recovery was complete.

What is still unknown?

  • The attack method, responsible actor, and entry point were not identified.
  • The affected systems were not named, and the reporting did not establish whether customer-facing websites or services were affected.
  • There was no confirmed finding on whether personal or other sensitive information had been compromised.
  • No recovery timetable or subsequent system-status update was provided in the October 13 reporting.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.