2026-10-30
ASOS customer data breach and fake app alert: names and contact details taken, dates of birth and search history reported — what customers should do
On October 6, 2026, ASOS customers received an unauthorised push notification through the ASOS app. ASOS said an unauthorised party had accessed third-party platforms it uses to communicate with customers. It said customers' names and contact details may have been accessed, and that it does not believe payment card information or account passwords were affected. In a later customer update, as reported by BleepingComputer, ASOS said an employee's login credentials were obtained by impersonating a trusted contact. The BBC reported that a sample supplied by the attackers also included customer numbers, dates of birth and searches made on the ASOS website; ASOS has not confirmed that list. ASOS has not published how many customers are affected. This site's take: a message that quotes your name or a past search is not proof it comes from ASOS. Open the ASOS app or website yourself instead of tapping a link.