Skip to content
ASOS Credential Theft Leads to Third-Party Data Breach

ASOS Credential Theft Leads to Third-Party Data Breach

First seen 13 Oct 2026, 17:32 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 13, 2026 at 17:33 UTC
  • •ASOS suffered a data breach due to social engineering tactics targeting employee credentials.
  • •The breach involved access to third-party platforms, but payment information was not compromised.
  • •The Xuanye Group claimed responsibility for the attack, emphasizing the risks retailers face.

ASOS reported a data security incident caused by a social engineering attack that compromised employee credentials. Hackers accessed third-party platforms used by ASOS, potentially exposing basic personal information of customers, although payment information was not affected. The incident was initially flagged by customers receiving unauthorized notifications claiming a breach. ASOS confirmed that the attackers impersonated a trusted entity to obtain login credentials. The company has since secured the affected platforms and stated that its website and app remained safe for customers. The Xuanye Group claimed responsibility for the attack. This incident highlights the ongoing risks retailers face from cyber threats, particularly as the holiday shopping season approaches.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-01
ASOS data breach reported
ASOS confirmed a data security incident involving unauthorized access to employee credentials and third-party platforms.
Teiss
2026-10-01
Unauthorized notifications sent
Customers received push notifications claiming ASOS's internal network had been breached, prompting an internal investigation.
Teiss
2026-10-13
NCC Group warns retailers
NCC Group highlighted the ongoing risks to retailers from cyber criminals, especially during the holiday season.
Nccgroup

More articles in this cluster (3)

Following this threat?

Track Xuanye Group and ASOS in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (12)

1 / 4

Common questions

What information was compromised?
Basic personal information, including names and details, may have been accessed, but payment information was not affected.
How did the breach occur?
The breach was caused by a social engineering attack where hackers impersonated a trusted entity to steal employee credentials.
What actions has ASOS taken?
ASOS secured the affected platforms and confirmed that its website and app remained safe for customers during the incident.