Asos hackers accessed more personal details than initially stated
Online retailer Asos has informed its customers that hackers are in possession of detailed profiles of potentially millions of users, exceeding the "basic contact details" initially reported as accessed.
Online fashion retailer Asos has revealed to its customers that hackers have accessed detailed profiles of potentially millions of users, a scope that extends beyond the "basic contact details" previously disclosed. The update followed contact from BBC News with cybercriminals who claimed the recent data breach involved more extensive information.
Details now confirmed to be in the hands of criminals include names, addresses, phone numbers, email addresses, customer numbers, and dates of birth. One affected customer expressed significant concern to the BBC about the extent of personal information now accessible to hackers. The compromised data also includes customer search terms used on the Asos website.
Asos confirmed that data profiles were accessed but stated that no bank details or passwords were compromised. The company is advising customers to remain vigilant regarding unexpected messages or calls purporting to be from Asos and has reinforced its security measures.
The breach occurred when hackers gained access to an Asos employee account by impersonating a trusted contact to obtain login credentials. This access allowed them to download customer data. The cybercriminals indicated they utilized a third-party system connected to the data platform Snowflake.