Asos Warns Millions of Users Hackers Stole Detailed Profiles After Employee Account Breach
Updated
Updated · bbc.co.uk · Oct 8
Asos Warns Millions of Users Hackers Stole Detailed Profiles After Employee Account Breach
3 articles · Updated · bbc.co.uk · Oct 8
Summary
Asos told customers hackers hold detailed user profiles—not just basic contact data—including names, addresses, phone numbers, emails, customer numbers and on-site search histories.
The retailer said the breach began when attackers impersonated a trusted contact and stole credentials for an employee account, then used that access to download customer data.
BBC News said criminals shared a sample of the stolen data after Asos had earlier disclosed only that basic personal information may have been accessed following an unauthorized app notification sent this week.
Asos said no passwords or bank details were accessed and its website and app remain safe, but warned customers to watch for impersonation scams; security experts also urged password changes as a precaution.