Threat Intelligence
TFG London cyber attack disrupts online orders and may affect customer data
TFG London has reported a cyber attack affecting online orders and returns. The company says payment information is safe, but some customer data may have been accessed.
Ross Grant3 min read
The short version
TFG London, a well-known fashion retailer, has been hit by a cyber attack. Online orders and returns are disrupted, and some customer data may have been accessed. The company says payment details are safe and is contacting those who might be affected. The full details of how the attack happened are still being investigated.
What happened?
TFG London, a major fashion retailer, has suffered a cyber attack affecting its online orders and returns. The company says payment information is not at risk, but some customer data may have been accessed. TFG London has reported the incident to authorities and is contacting affected customers.
What is known about the TFG London incident
TFG London, a major fashion retailer, has confirmed a cyber attack that has disrupted its online orders and returns. The company says it has activated its business continuity plan and reported the incident to authorities. TFG London is contacting customers whose personal data may have been accessed, but says there is no need for customers to change their passwords at this stage. Payment processing is handled by a third-party provider, and TFG London says there is no evidence so far that payment information is at risk. The company is still investigating to determine if any sensitive customer information was impacted. ITPro (opens in a new tab)
Who is affected and what is at risk
The attack appears to affect TFG London's UK operations, specifically online orders and returns. The company’s African and Australian branches, as well as its Inside Story and White Stuff brands, are not affected. Customers who have made online purchases or returns may have had their personal data accessed, though the company has not confirmed what type of data this includes. TFG London is proactively contacting those who might be affected. At this time, there is no indication that payment card details have been compromised, as these are processed by a separate provider.
How the attack may have happened
It is not yet clear how the attackers gained access to TFG London’s systems. The reporting suggests the attack could be similar to recent incidents at other major retailers, such as ASOS, where attackers impersonated trusted contacts to obtain login credentials. This technique, known as social engineering, involves tricking employees or contractors into revealing information or granting access. There is also speculation that a third-party supplier, such as a Managed Service Provider (MSP) or data hosting provider, could have been involved. No cybercrime group has claimed responsibility for the attack so far.
Recent context: attacks on other retailers
The TFG London incident follows a series of cyber attacks on major UK retailers, including M&S, Co-op, Harrods, and ASOS. In these cases, attackers used similar methods to access systems, disrupt operations, and steal customer data. Experts quoted in the reporting warn that retailers are attractive targets because they hold valuable customer information and rely on complex, interconnected systems. The consequences of such attacks can include operational disruption, financial losses, and damage to customer trust.
What customers should do
TFG London has stated that there is no need for customers to change their passwords at this time. However, customers should remain alert for any suspicious emails or messages that could be phishing attempts. If contacted by TFG London, follow the instructions provided and do not share sensitive information unless you are sure the request is genuine. Customers should also monitor their accounts for any unusual activity and consider using credit monitoring services if concerned.
What happens next
TFG London’s investigation is ongoing. The company will continue to update affected customers as more information becomes available. The incident has been reported to the relevant authorities, which may include the UK Information Commissioner’s Office (ICO). Under UK GDPR, companies that suffer data breaches can face fines of up to £17.5 million or 4% of global annual turnover, depending on the severity and handling of the incident. The full impact on TFG London’s reputation and finances will depend on the outcome of the investigation and any regulatory response.
Claimed vs confirmed
- Confirmed
Payment information is not at risk.
TFG London told customers payment processing is handled by a third-party provider and is not affected.
- Confirmed
Some customer data may have been accessed.
TFG London is contacting customers whose data might have been accessed.
- Unconfirmed
The attack may have involved a third-party supplier or social engineering.
ITPro suggests the attack could be similar to recent incidents involving social engineering or third-party suppliers, but this is not confirmed.
The impact
- Money
- TFG London could face regulatory fines under UK GDPR, which can reach up to £17.5 million or 4% of global annual turnover, depending on the outcome of the investigation.
- Reputation
- The incident may harm customer trust and disrupt business operations, especially as it follows similar attacks on other major retailers.
- Customers
- Customers may have had personal data exposed. They should watch for suspicious emails and monitor their accounts, but payment information is believed to be safe.
Why it matters
Customers who shop with TFG London could have their personal data exposed. Retailers are frequent targets for cyber attacks because they store valuable customer information. Such incidents can disrupt business, harm customer trust, and lead to regulatory investigations or fines.
How does it work?
The attack may have involved social engineering, where attackers impersonate trusted individuals to gain access to systems. This could include tricking employees or suppliers into revealing credentials or changing account privileges. The exact method used in the TFG London incident is not yet confirmed.
Key points
- TFG London suffered a cyber attack affecting online orders and returns.
- Payment information is believed to be safe, but some customer data may be at risk.
- The company is contacting affected customers and has reported the incident to authorities.
- The attack may have involved social engineering or a third-party supplier.
- Retailers remain prime targets for cyber attacks due to the value of customer data.
Sources
ITPro
Reference
