The hackers reportedly contacted BBC to say the data breach went beyond the “basic ...

Facebook • October 9, 2026

Share: View original

The hackers reportedly contacted BBC to say the data breach went beyond the “basic details” ASOS first told customers they had been able to access.

ASOS hackers reportedly took more personal data than first realised as company updates customers

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ASOS Confirms Data Breach Following Unauthorized Notification to Customers On October 6, 2026, ASOS confirmed a data breach after an unauthorized push notification was sent to customers via its app, claiming that hackers had compromised their Snowflake data instance. The notification, which was addressed to ASOS's data protection officer and IT teams, warned of potential leaks of basic personal information, including names and details, but ASOS stated that payment card information and account passwords were not impacted. The company is currently investigating the incident and has restricted access to its notification platforms. ASOS has reassured customers that its website and app are operating normally, and it has cyber-security insurance in place. The incident has raised concerns about potential phishing scams targeting customers, as attackers may exploit the situation to gain further access to sensitive information. ASOS's shares fell by over 12% following the incident, highlighting the potential financial and reputational impact of the breach. 70 sources 58

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)

CWE-200 - Exposure of Sensitive Information

MITRE ATT&CK (1)

T1041 - Exfiltration Over C2 Channel