Phase Eight and Hobbs owner hit by cyber-attack, as H&M probes separate hack claim

Phase Eight and Hobbs owner hit by cyber-attack, as H&M probes separate hack claim

The owner of the premium fashion labels Hobbs, Whistles and Phase Eight says it is looking into a cyber-security incident.

TFG London, the UK division of retail group The Foschini Group, said it detected an incident on Sunday that affected some IT systems and was "specifically impacting our Phase Eight, Hobbs, and Whistles brands".

"We are actively investigating and working with external cyber security specialists," the company told BBC News in a statement.

At the same time, H&M is examining a separate allegation that it was targeted by a well-known hacking group.

TFG said its brands’ stores are continuing to trade as normal, although some website functions may not be available, adding "we apologise for any disruption and will provide additional updates to our customers as appropriate".

The retail group reportedly told customers in an email that it did not believe payment information had been affected by the incident.

"As our investigation continues, we will be working to identify if any sensitive information related to our customers was impacted," it said.

The email, seen by news service PA, also said that anyone whose personal information had been affected would be contacted directly.

"We do not believe it is necessary to change your account login information at this time," it added.

Beverley Griffiths, senior lecturer in security and resilience at Bucks New University, told PA that this was "a clear sign that major brands are firmly in the crosshairs of cyber attackers".

Fashion giants ranging from Adidas to Alexander McQueen have been targeted by cyber-criminals trying to extort money by threatening to release customer data unless they are paid a ransom.

"No organisation is immune, so the real test of resilience is how quickly a business can detect an incident, respond and recover while keeping its customers informed," Griffiths said, adding that customers should remain "vigilant" and cautious of suspicious messages.

On Monday, it was also reported that fashion giant H&M was investigating claims of a hack by a cyber-criminal group called ShinyHunters.

The hackers have previously been linked to high-profile attacks including targeting the FBI, Rockstar Games and Ticketmaster.

"We are aware of information circulating online regarding a potential cyber security incident and are currently investigating the claims," H&M told BBC News in a statement.

"At this time, we have not found any indications that our data environment has been compromised."

This comes just a week after Asos customers were told the online fashion and beauty retailer had been hacked by another group, through a push notification that appeared on their phone screens.

Cyber-security experts told the BBC it was an unprecedented step for hackers to effectively turn an app notification system into a "ransom note".

It later emerged that hackers had accessed more detailed personal information belonging to Asos customers than the retailer had initially indicated.

An update was sent to customers after BBC News told the retailer it had been contacted by cyber criminals who said the breach went beyond the "basic contact details" Asos had previously said may have been accessed.