[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5cDLktOou-tLiXbp_s7MnbG35e3e2go94Pbc6vDMzBI":3},{"article":4,"iocs":47,"watch_terms":48,"solutions":49,"lesson":135},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"d17e1017-1035-4c87-b66d-b7ca82ebd3a5","TFG London cyberattack disrupts systems at Hobbs and Whistles retailers","tfg-london-cyberattack-disrupts-systems-at-hobbs-and-whistles-retailers-92637f","TFG London detected a cybersecurity incident that impacted IT systems used by the Phase Eight, Hobbs, and Whistles premium fashion brands. [...]","TFG London has detected a cybersecurity incident that has impacted IT systems for its Phase Eight, Hobbs, and Whistles brands, with several systems remaining unavailable. The company is investigating potential customer data compromise and has engaged external cybersecurity experts. The incident does not appear to have affected the group's other brands or its operations in Australia and Africa.","TFG London cyberattack disrupts IT systems at Phase Eight, Hobbs, and Whistles.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Ftfg-london-cyberattack-disrupts-systems-at-hobbs-and-whistles-retailers\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F10\u002F13\u002FHOBBS.jpg","2026-10-13T16:44:18+00:00","2026-10-13T18:00:10.357745+00:00",7,[17,20,23,25,27],{"name":18,"type":19},"TFG London","vendor",{"name":21,"type":22},"Phase Eight","product",{"name":24,"type":22},"Hobbs",{"name":26,"type":22},"Whistles",{"name":28,"type":19},"The Foschini Group","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":29,"icon":31,"name":32,"slug":33},null,"Breaches","breaches",[35,37,42],{"category":36},{"id":29,"icon":31,"name":32,"slug":33},{"category":38},{"id":39,"icon":31,"name":40,"slug":41},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":43},{"id":44,"icon":31,"name":45,"slug":46},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,28,21],{"controls":50,"vendors":134},[51,80,106],{"slug":52,"name":53,"problem":54,"products":55},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[56,64,72],{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"slug":81,"name":82,"problem":83,"products":84},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[85,93,98],{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":94,"product_name":95,"url":96,"description":97},"managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"slug":107,"name":108,"problem":109,"products":110},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[111,119,127],{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","mandiant-incident-response","Mandiant Incident Response","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fconsulting\u002Fmandiant-incident-response-services","Incident response services from Mandiant, available on retainer.",{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",{"vendor_slug":128,"vendor_name":129,"vendor_logo":130,"product_slug":41,"product_name":131,"url":132,"description":133},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",[],{"slug":136,"title":137,"body":138,"framework_refs":139,"framework_notes":151},"tfg-london-cyberattack-hits-multiple-retail-brands-across-shared-it-infrastructure","TFG London Cyberattack Hits Multiple Retail Brands Across Shared IT Infrastructure","The TFG London incident highlights the systemic risk of shared IT infrastructure across multiple retail brands — a compromise of one environment can cascade across several business units simultaneously. The fact that customer data may have been compromised underscores the critical importance of data minimisation and strong access controls around personally identifiable information. Containment appears to have been partial, as the attack did not spread to other geographic operations, suggesting some segmentation existed but was insufficient within the UK brand portfolio. Retailers holding customer data are high-value targets, and delays in detection and response can significantly amplify both regulatory and reputational damage. Engaging external cybersecurity experts reactively, rather than having pre-established incident response plans, often slows the critical early hours of containment.",[140,141,142,143,144,145,146,147,148,149,150],"NIST CSF: RS.CO-2 (Incident Reporting)","NIST SP 800-61 Rev 2 (Computer Security Incident Handling Guide)","CIS Control 13 – Network Monitoring and Defence","CIS Control 3 – Data Protection","CIS Control 17 – Incident Response Management","GDPR Article 33 – Notification of a Personal Data Breach to Supervisory Authority","GDPR Article 34 – Communication of a Personal Data Breach to Data Subject","GDPR Article 25 – Data Protection by Design and by Default","NIST AC-4 – Information Flow Enforcement (Network Segmentation)","ISO\u002FIEC 27001 – A.16 Information Security Incident Management","ITIL 4 – Major Incident Management Practice",{}]