ASOS breach update: Hackers stole customer details and shopping searches

What happened

ASOS has confirmed that attackers accessed customer information after tricking an employee into handing over login credentials. The company says it locked down the affected platforms and launched an investigation with internal and external specialists.

Stolen ASOS data contains shopping searches as well as personal details, so customers should watch out for convincing phishing (messages that impersonate someone to obtain passwords or money) messages. The customer data stolen from global fashion retailer ASOS contains more than just names and contact details, raising questions about its early reassurances.

While the retailer says payment card information and customer passwords were not accessed, reporting by the BBC shows the stolen information contains more than the “basic personal information” initially mentioned by the company. The stolen login details were used to access information on third-party platforms used by ASOS.

Key facts

• Stolen ASOS data — includes: shopping searches as well as personal details, so customers should watch out for convincing phishing messages
• The customer data stolen from global fashion retailer ASOS — includes: more than just names and contact details, raising questions about its early reassurances