The Foschini Group (JSE: TFG) filed a SENS note this morning: TFG London identified a cybersecurity incident on 11 October 2026 affecting certain IT systems, "specifically our Phase Eight, Hobbs and Whistles brands." Inside Story and White Stuff are not affected. Stores remain open and trading, but several IT systems are still unavailable (TFG SENS).
TFG says it activated incident response and business continuity plans, engaged external cybersecurity specialists to contain the incident, and reported it to the relevant UK authorities. Africa and Australia run on separate systems and are not affected (TFG SENS).
The investigation is ongoing, including whether any personal or other sensitive information has been compromised. If that turns out to be the case, TFG London says it will notify affected individuals or organisations. The Board will issue another SENS note if something material changes (TFG SENS).
Customer-facing detail from BBC and PA: TFG told shoppers it does not believe payment information was affected (payments go through an external provider), that it does not believe customers need to change account passwords for now, and that anyone whose personal information was impacted would be told directly. Orders around the incident window may be delayed (BBC / PA).
Scale: TFG is one of South Africa's largest retail groups, with nearly 5,000 stores across 18 countries and roughly 40 brands (The Record). This is a disclosed UK fashion-banner outage in the same week as Ahold Delhaize's network incident and an unconfirmed H&M claim TFG is not tied to. Cause, ransomware branding, and record counts: Undisclosed.
What we'd do if we sat retail SOC for a multi-banner fashion group: treat "stores open, websites/IT down" as containment theater until identity, e-commerce, OMS, and loyalty are scoped separately. Preserve IdP, VPN, EDR, and payment-orchestration logs before cleanup. Confirm the external payment provider's session window. Do not assume separate Africa/Australia systems mean shared SaaS tenants or shared IdP were clean — ask that question out loud.