Someone went shopping in ASUS's eShop – for customer data

Asus has warned its eShop customers that an intruder may have gained unauthorized access to part of the company's online store and potentially obtained contact details and order records. The PC maker disclosed the incident in an email to customers, although the exact timeline of the intrusion remains unclear. Asus stated that no payment card, bank account, or other financial information was compromised, and they have not observed any misuse of the stolen data.

The company has taken steps to contain the incident, launched an investigation, and implemented additional security measures. However, the number of affected customers, the date and duration of the breach, the affected countries, and the attacker's method of gaining access remain undisclosed. Asus cautioned customers to be vigilant for suspicious communications regarding their purchases or orders, as the stolen details could enable scammers to craft more convincing phishing attempts.

This is not the first data breach involving Asus; in December, one of its suppliers fell victim to ransomware hackers who stole 1 TB of data but claimed to have no access to Asus's systems or customer information.