Asos warns customers about full extent of data breach after BBC contacted by hackers

Asos has issued an update to customers about the extent of a recent data breach, after the BBC was contacted by hackers claiming to have sensitive user information. In addition to basic contact details, hackers now possess names, addresses, phone numbers, emails, customer numbers, and search terms used on the website. These findings suggest that phishing attacks or impersonation scams could be more feasible for cybercriminals.

Asos confirmed that no bank details or passwords were accessed, but urged customers to remain vigilant against unsolicited messages or calls that may claim to be from the retailer. The breach was first reported by cyber criminals on Tuesday when they exploited Asos's app system to display a pop-up notification to millions of users.

Later, the company disclosed to shareholders via the London Stock Exchange that the pop-up was sent by an unauthorized third party, and that basic personal information may have been compromised. On Wednesday, the hackers reached out to the BBC, releasing a sample of the stolen data which revealed the full scope of the breach.