Hobbs and Whistles Owner TFG London Hit by Cyberattack

What happened

TFG London, the retail group behind fashion brands Hobbs and Whistles, has confirmed a cyberattack that has knocked out several of its IT systems and is delaying customer orders. According to The Register, the incident places TFG London among a growing list of retailers to be hit by cyberattacks this year, with the fallout still affecting day-to-day operations as systems remain offline.

Details of the attack's precise nature and scope have not been fully disclosed, but the practical impact is clear: order processing has been disrupted, pointing to systems central to fulfilment and customer-facing operations being affected rather than a purely back-office issue.

Why it matters

For retailers, order fulfilment sits at the heart of the brand promise — it's the moment a transaction becomes a lived experience. When core systems go down, the damage isn't confined to IT; it surfaces immediately as missed delivery dates, unanswered customer queries and eroded trust in brands that depend on reliability as much as design or price.

The incident also reinforces a pattern seen across the retail sector recently: fashion and consumer brands are increasingly attractive targets, likely because their systems link payment data, loyalty programmes and supply chains in ways that create multiple points of exposure. For digital transformation leaders, this is a reminder that resilience planning — not just prevention — needs to be built into customer-facing infrastructure from the outset.

The Renascence take

Retailers tend to treat cybersecurity as an IT cost centre, but incidents like this expose it as a customer experience issue with reputational consequences that often outlast the technical fix.

Most organisations will frame this as a security failure and move on once systems are restored. The sharper lesson is behavioural: customers forgive outages far more readily when they're told clearly, quickly and without corporate hedging what's happening to their order and when it will arrive. A credible, proactive communications protocol — triggered the moment systems go down — does more to protect loyalty than any post-incident apology. Operators serious about resilience should pressure-test not just their defences, but their first hour of customer communication during an outage.