Asos warns customers about full extent of data breach after BBC contacted by hackers

Asos has informed its customers that hackers now possess detailed profiles of potentially millions of users. The breach, which went beyond basic contact details, has resulted in the exposure of names, addresses, phone numbers, emails, customer numbers, and the searches customers conducted on the website. Phishing attacks and impersonation scams are now a heightened risk, with scammers able to exploit this information.

Asos has reassured customers that bank details and passwords remain secure, urging individuals to remain vigilant against unexpected messages or calls claiming to be from the online store. The company did not disclose the extent of the breach, only confirming that the unauthorized pop-up sent via their app originated from a third party.

The breach became public on Tuesday when cyber criminals utilized Asos's app system to display a pop-up notification to millions of users. The following day, Asos disclosed to shareholders via the London Stock Exchange that the pop-up was sent by an unauthorized third party and basic personal information may have been accessed. On Wednesday evening, the cybercriminals responsible for the breach reached out to the BBC, sharing a sample of the stolen data, revealing the full scope of the hack.