- Online fashion retailer Asos has confirmed that customer personal data was stolen during a major cyber attack after an unauthorised party impersonated a trusted contact to compromise an employee's log-in credentials.
- The security breach came to light on Tuesday when Asos customers received an unexpected push notification on their mobile phones reading "ASOS HACKED", which directed them to a Telegram account.
- A 48-hour investigation revealed that hackers accessed names, contact details, and search history on third-party platforms, though Asos confirmed no payment card details or account passwords were compromised.
- Asos immediately locked down the affected platforms and has warned customers via email to remain cautious of unexpected messages or phone calls pretending to be from the retailer.
- Cybersecurity experts warned that although financial information was not accessed, stolen contact details and shopping habits give cybercriminals the data needed to execute highly convincing personalised scams.
IN FULL
