Several retail firms across Europe recently confirmed cyber incidents impacting their operations. On October 12, Ahold Delhaize, a Netherlands-based multinational retail company, reported a “security issue” within its networks. To safeguard its systems, the company was compelled to take “some systems offline.” This disruption particularly affected three of the group’s brands: the well-known supermarket chain Albert Heijn, which operates in the Netherlands and Belgium, as well as the Dutch drugstore chain Etos and the Dutch liquor store chain Gall & Gall.
The following day, on October 13, Reuters reported that The Foschini Group (TFG), a South African retail conglomerate that owns popular fashion brands like Hobbs and Whistles, was also grappling with a “cyber incident.” This intrusion reportedly emerged on October 11 and affected TFG’s UK subsidiary, TFG London, with certain IT systems being compromised. Specific brands affected within TFG included Phase Eight, Hobbs, and Whistles. However, the company reassured its stakeholders that there was “no reason to believe that payment information is at risk” at this stage.
Additionally, TFG noted that other brands within the group, such as Inside Story and White Stuff, remained unaffected by the incident. Furthermore, the company’s subsidiaries in Africa and Australia reported no operational disruptions related to the cyber incident. TFG subsequently reported the situation to the relevant UK authorities to ensure compliance and transparency.
In an insightful commentary on this developing situation, Muhammad Yahya Patel, vCISO and cybersecurity advisor for the EMEA region at Huntress, stated that the unaffected status of certain brands within TFG implied that a degree of system separation was in effect. This segmentation appeared to have successfully limited the extent of the breach, an observation that Patel considered a positive note amid the chaos.
On the same day, a report by The Times indicated that the global fast-fashion retailer H&M was also scrutinizing information circulating online regarding a potential incident. However, the retailer noted that, as of the latest updates, there was no indication that its data environment had been compromised. At this point, there appears to be no connection between these incidents, raising questions about the broader landscape of cybersecurity threats.
The recent reports of cybersecurity breaches occur closely on the heels of developments involving ASOS, a UK fashion retailer. ASOS customers received peculiar push notifications suggesting that the firm had been hacked. In an official statement, ASOS confirmed unauthorized access to “third-party platforms” used for customer communication, leading to the exposure of personal information such as names and contact details. Nonetheless, the retailer stressed that no payment-card data or account passwords were affected, providing some assurance amid the ongoing concerns.
Adding to the complexity of the situation, many supermarket chains in France are still grappling with a large-scale cyber-attack. This breach saw attackers tampering with refrigeration controls, primarily during the night between October 11 and 12. The impact has been significant, as it led to the loss of numerous food products and generated financial damages estimated in the hundreds of thousands of euros. This incident exemplifies the far-reaching consequences that cyber-attacks can impose on the supply chain and food security.
As Europe’s retail sector faces these incidents, the implications for cybersecurity remain critical. The pressing need for robust security measures and vigilance among retail firms cannot be overstated. With incidents such as these becoming increasingly common, stakeholders will need to brace for the complex interplay of cyber threats as they aim to protect both their operational integrity and customer data.
In summary, the cyber incidents affecting Ahold Delhaize, TFG, H&M, and ASOS highlight a troubling trend within the retail sector, demanding urgent attention from cybersecurity experts and business leaders alike. As firms strive to recover from these breaches, the importance of rigorous security protocols and system separations will be paramount in minimizing future risks.