ASOS confirms hackers accessed basic user data after Tuesday app breach
ASOS confirmed on Tuesday morning that hackers breached its app and may have accessed basic personal information such as names and contact details. The retailer stressed that payment‑card information and account passwords were not affected by the incident.
Hackers sent a push notification via the ASOS app on Tuesday morning, threatening users and directly addressing the company’s data protection officer and IT teams. ASOS described the incident as a public extortion attempt, noting that such tactics are rare in cyberattacks. The company is investigating the breach and has filed a statement with the London Stock Exchange. ASOS said that some basic customer data may have been accessed, but that, according to the company, payment card information and account passwords were not compromised. The breach was discovered earlier today, according to ASOS’s statement. Users of the ASOS app received threatening notifications from the attackers. ASOS said it is investigating a cyberattack on external platforms linked to the app breach.
ASOS characterized the attackers’ push notification as a public extortion attempt, which it labeled a rare tactic in cyberattacks. The company confirmed it is investigating the cyberattack on external platforms after the notification was sent. ASOS confirmed that hackers breached the app for a ransom note.
What we know
Hackers sent a notification via the app on Tuesday morning.
Basic personal information including name and contact details may have been accessed.
Payment-card information or account passwords were not impacted.
Attackers addressed the retailer’s data protection officer and IT teams directly.
Hackers exploited the app for a public extortion attempt, a rare tactic in cyberattacks.