ReportedUpdated 3 Nov 2026
ASOS data breach
What happened
ASOS confirmed a data breach caused by a social engineering attack. According to the company,
AI summary of accepted evidence. Check the original sources for the full context.
Reported impact
An affected population has not been established in the accepted evidence.
- Attack method
- social engineering attack
Source evidence
1Read the original reporting and statements. Multiple articles may rely on the same underlying source.
BleepingComputer01ASOS links data breach to social engineering attack, credential theft
Retrieved 3 Nov 2026
Those credentials were then used to access information on certain third-party platforms used by ASOS.
Attributed reporting
1 more excerpt
We discovered that an unauthorised party gained access to an ASOS employee account by impersonating a trusted contact to obtain log in credentials
Attributed reporting
Updates and corrections
- Revision 1
Incident updated.