ASOS Says Customer Names and Contact Details Were Accessed in Incident

Summary
ASOS reported an unauthorized push notification to some customers and said names and contact details were accessed. The company said it did not believe payment card information or passwords were affected; the investigation is ongoing.
Key points
- Some ASOS customers received an unauthorized push notification on Tuesday, 6 October.
- ASOS said customer names and contact details were accessed.
- ASOS said it did not believe payment card information or account passwords were affected.
- The company was investigating the unauthorized activity.
- The NCSC advised customers to watch for suspicious messages and avoid clicking suspicious links.
- Customers were advised to review account activity and update vulnerable passwords.
Article Details
- Victim Organization
- ASOS
- Incident Type
- Unauthorized push notification activity and access to customer personal information
- Data Types Exposed
- Names
- Contact details
- Operational Impact
- Some customers received an unauthorized push notification. ASOS was investigating the activity. The source says ASOS did not believe payment card information or account passwords were affected.
- Claim Status
- confirmed
