Asos warns customers about full extent of data breach after BBC contacted by hackers

Asos has informed its customers that hackers possess extensive profiles of potentially millions of users. The retailer learned this after BBC News alerted the company to a series of cyber criminals claiming to have received a message from the breach, which revealed that the attack extended beyond basic contact information. Names, addresses, phone numbers, email addresses, customer IDs, and search terms such as "reclaimed vintage," "glamorous wide fit," and "Asos petite" are now in the hands of the cyber criminals.

This new information could empower scammers to launch sophisticated phishing campaigns via email or phone calls, posing a higher risk to individual users. Asos has warned customers to remain vigilant against unexpected messages or calls purporting to be from the company, assuring customers that they will never request passwords, security codes, or payment details via unsolicited communication.

The company declined to provide details on the scale of the breach. The incident garnered global attention on Tuesday when hackers leveraged Asos's app system to display a pop-up notification to millions of users. Later in the day, the company disclosed to shareholders via the London Stock Exchange that the pop-up was sent by an unapproved third party, and that basic personal information including names and contact details might have been accessed.

On Wednesday evening, the cybercriminals contacted the BBC, sharing a sample of the stolen data that demonstrated the full extent of the hack.