- Online fashion retailer Asos has confirmed that customer personal data was stolen during a major cyber attack after an unauthorised party impersonated a trusted contact to compromise an employee's log-in credentials.
- The security breach came to light on Tuesday when Asos customers received an unexpected push notification on their mobile phones reading "ASOS HACKED", which directed them to a Telegram account.
- A 48-hour investigation revealed that hackers accessed names, contact details, and search history on third-party platforms, though Asos confirmed no payment card details or account passwords were compromised.
- Asos immediately locked down the affected platforms and has warned customers via email to remain cautious of unexpected messages or phone calls pretending to be from the retailer.
- Cybersecurity experts warned that although financial information was not accessed, stolen contact details and shopping habits give cybercriminals the data needed to execute highly convincing personalised scams.
IN FULL
Asos warns hack was worse than thought and customers’ personal information at risk
