ASOS has said it is investigating a cyber incident and that some customer personal information may have been accessed.
ASOS has said that an unauthorised notification was sent to their customers and that names and details of their customers may have been accessed.
The company has said it does not believe payment card information or account passwords were affected.
Some ASOS customers received an unauthorised push notification from ASOS on Tuesday 6th October.
The company is investigating the unauthorised activity and has stated that basic personal information including name and details may have been accessed . They have said they do not believe payment card information or account passwords have been impacted.
If you are an ASOS customer, you should assume you are affected by this incident, even if you did not receive the unauthorised notification.
See our data breach guidance for information on what you should do when you are affected by an incident like this.
Look out for suspicious messages, which can arrive some time after a data breach incident.
Do not click on any suspicious links, including those you receive in push notifications, or via emails or messages.
Although ASOS have stated that they do not believe payment details or account passwords are affected:
See the Stop! Think Fraud guidance on how to report fraud in the UK
Follow our Top tips for staying secure online – using passkeys, or strong, separate passwords plus two-step verification for your accounts will keep you secure even if your data is breached.
1 Confirm you're affected
Confirm you're affected
3 Update vulnerable passwords
Update vulnerable passwords
4 Review account activity
Review account activity
5 Recover compromised accounts
Recover compromised accounts
6 Check for wider exposure
Check for wider exposure
Data breaches: guidance for individuals and families
Phishing scams: how to spot and report them
Passkeys: what you need to know
Top tips for staying secure online
Stop! Think Fraud: Reporting fraud
When cyber attacks happen: helping organisations recover
A highly disruptive incident can feel overwhelming. New guidance provides a framework for response and recovery.
Cyber resilience matters as much as cyber defence
Assured Cyber Incident Response scheme – important updates
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
