Asus confirms eShop data breach exposed customer order records and contact details — payment data safe, but firm warns of targeted phishing scams

Asus has announced a data breach affecting its eShop, which may have exposed customer order records and contact details. However, no payment or financial information was compromised. The extent of the breach and which regions were impacted remain unclear. The firm has not disclosed the duration of the breach or the identity of the perpetrators.

Asus has taken immediate action to contain the issue and is investigating the incident. In light of the breach, customers are urged to be vigilant against potential phishing scams. Scammers could use the leaked information to impersonate Asus and send fraudulent communications, such as emails pretending to be about a recent order.

These messages may include personal details like the customer's name, address, and order history, which could convince recipients that the message is legitimate. To avoid falling victim to these scams, Asus advises customers not to click on any links or scan QR codes in suspicious emails. Instead, they should manually visit Asus's official websites in their web browser.

Additionally, users should refrain from sharing personal information or passwords in response to phone calls or messages, unless they are confident they are speaking with genuine Asus support personnel. The company also recommends enabling two-factor authentication (also known as 2FA or MFA) to further secure customer accounts, as this can prevent unauthorized access even if an attacker obtains the password.