Skip to content
ASOS Cyberattack Exposes Customer Data via Compromised Employee Credentials

ASOS Cyberattack Exposes Customer Data via Compromised Employee Credentials

First seen 17 Oct 2026, 16:47 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 17, 2026 at 18:20 UTC
  • •Hackers accessed ASOS customer data using compromised employee credentials.
  • •The breach affected over 138,000 customers, but no payment information was compromised.
  • •ASOS is investigating the incident and has restricted access to affected platforms.

ASOS confirmed a cyberattack where hackers used compromised employee credentials to access customer data, affecting over 138,000 individuals. The breach was linked to an unauthorized notification sent through the retailer's mobile app on October 6, 2026. The attacker impersonated a trusted individual to obtain login credentials, gaining access to customer names and details through third-party platforms. ASOS stated that no customer passwords or payment card information were compromised. The company has restricted access to affected platforms and is collaborating with law enforcement and cybersecurity experts. A previous security incident involving customer accounts occurred in July, but there is no evidence linking the two incidents. The investigation is ongoing, and ASOS has not disclosed the total number of affected customers or the specific third-party platforms involved.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-06
Unauthorized notification sent via ASOS app
Customers received a message claiming ASOS had been hacked, alleging a compromise of a Snowflake environment.
Esecurityplanet
2026-10-08
ASOS disclosed details of the breach
ASOS confirmed that an unauthorized party accessed customer data through compromised employee credentials.
Esecurityplanet
2026-10-15
ASOS confirmed the number of affected customers
The company revealed that the breach affected 138,828 customers, but no passwords or payment information were accessed.
Esecurityplanet

More articles in this cluster (2)

Following this threat?

Track ASOS in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 4

Common questions

How many customers were affected?
The breach affected over 138,000 customers, with their names and details accessed.
What type of information was compromised?
Customer names and details were accessed, but no passwords or payment information were compromised.
What actions is ASOS taking in response?
ASOS has restricted access to affected platforms and is investigating the breach with law enforcement and cybersecurity experts.