Asos has alerted its customers that hackers have gained access to extensive profiles of potentially millions of users of the online retail platform. This revelation comes after the company was informed by BBC News that cybercriminals claimed this recent data breach involved more than just basic contact information.
The compromised data includes names, addresses, phone numbers, email addresses, and customer identification numbers. Additionally, the hackers have access to users’ search histories on the site, with terms such as “reclaimed vintage,” “glamorous wide fit,” and “Asos petite” among the details exposed.
In light of this breach, the potential for phishing attacks targeting customers has increased significantly, with scammers likely to leverage the information for more convincing fraudulent communications.
Asos has heightened awareness among customers regarding potential impersonation frauds. In a communication to their users, they acknowledged that while detailed customer profiles were compromised, no bank details or passwords were involved in the breach.
“Please remain vigilant against any unexpected messages or calls claiming to be from Asos,” the company warned. “We will never ask you to share passwords, security codes, or payment details through unsolicited messages or calls.”
The company did not provide further details regarding the extent of the security breach. This major incident drew worldwide attention when cybercriminals exploited Asos’s own application system to disseminate a pop-up notification to potentially millions of customers.
Subsequently, Asos confirmed to shareholders via the London Stock Exchange that the notification had originated from an unauthorized third party and that “basic personal information including name and contact details may have been accessed.” This message was also echoed in the email sent to customers.
On Wednesday evening, the hackers contacted the BBC, providing a sample of the stolen data that showcased the true scale of the breach. The BBC delayed publication to prioritize the communication between Asos and its customers.
Editor’s Take
This incident underscores the persistent vulnerability of personal data in the digital landscape. For consumers, it serves as a stark reminder to maintain vigilance against phishing scams. For businesses, the breach highlights the urgent necessity of robust cyber defenses to protect user data. As the frequency of such incidents increases, both developers and companies must prioritize security measures and foster trust in the evolving digital economy.
Source: www.bbc.co.uk
