“We are experiencing a security issue,” Ahold Delhaize said on October 12, adding the group had taken “some systems offline” to protect them.
Ahold Delhaize: three brands affected after systems taken offline
Netherlands-based multinational Ahold Delhaize confirmed on October 12 that it was grappling with “a security issue” inside its networks and had taken “some systems offline” as a protective measure. The company said the disruption was reported to affect three of the group’s brands: supermarket chain Albert Heijn (operating in the Netherlands and Belgium), Dutch drugstore chain Etos, and Dutch liquor store chain Gall & Gall. The statement, as published in the reporting, provided no further technical detail about the vector or the extent of data exposure; it focused on operational impact and containment steps.
The Foschini Group (TFG): incident at TFG London affecting Phase Eight, Hobbs and Whistles
Reuters reported that South African retail group The Foschini Group (TFG) became aware on October 11 of a “cyber incident” affecting its UK subsidiary, TFG London. The company said “certain IT systems” were impacted and identified the affected brands as including Phase Eight and Hobbs and Whistles. TFG explicitly stated there was “no reason to believe that payment information is at risk” at this stage. Other TFG high-street brands, including Inside Story and White Stuff, were reported as not affected, and TFG’s TFG Africa and TFG Australia subsidiaries were also not experiencing operational disruption. TFG said it had reported the incident to the relevant UK authorities.
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scrambleASOS: third‑party communication platforms accessed; personal contact data taken
Days prior to the latest wave of retail interruptions, customers of UK fashion retailer ASOS received a push notification that prompted alarm and an investigation. ASOS confirmed an unauthorized intrusion into “third‑party platforms” it uses to communicate with customers and said personal information including names and contact details and some non-personal account related information “have been accessed.” In its latest customer update, published on October 13, ASOS reiterated that no payment‑card information or account passwords were impacted.
H&M and French supermarket refrigeration tampering: separate probes
According to The Times, clothing retailer H&M was examining information circulating online about a potential incident. At the time of reporting, H&M said it had found no indication that its data environment had been compromised. Separately, many supermarket chains in France were still dealing with a large‑scale cyber‑attack in which attackers tampered with refrigeration controlling systems during the night between October 11 and 12. The interference led to the loss of a large amount of food products and financial losses estimated in hundreds of thousands of euros.
What this means for retailers, regulators, and customers
- Retail IT and security teams: The pattern of impacts — operational disruption at Ahold Delhaize, localized system effects at TFG London, and third‑party platform access at ASOS — highlights the need to review network segmentation and third‑party controls. Muhammad Yahya Patel, vCISO and cybersecurity advisor for EMEA at Huntress, noted that the fact Inside Story and White Stuff and TFG’s Africa and Australia operations were untouched “suggests some degree of system separation was in place. That separation, which limited the blast radius, is worth noting as a positive.”
- Regulators and law enforcement: TFG has notified the relevant UK authorities, and other affected firms have reported and are investigating internally. Where incidents affect consumer data or cross borders, regulators will be tracking notifications, containment measures and any evidence of data exfiltration.
- Customers and the public: ASOS customers were directly informed that names, contact details and some non‑personal account information were accessed; ASOS stressed that payment cards and passwords were not compromised. For shoppers at affected supermarket chains, the French refrigeration tampering produced immediate physical loss — spoiled inventory and economic harm measured in the low hundreds of thousands of euros so far.
At present there is no indication the incidents described are related to one another; the affected organisations are conducting their own containment and reporting actions while public updates continue. Investigations reported in this coverage remain ongoing, and authorities and the companies themselves will determine next steps and any regulatory or remediation obligations.
