Home / Business and Economy / ASOS Suffers Data Breach: Customer Info Exposed
ASOS Suffers Data Breach: Customer Info Exposed
9 Oct
Summary
- An ASOS employee account was compromised via social engineering tactics.
- Customer names and contact details were accessed in the breach.
- Payment card information and account passwords remained secure.
British online fashion retailer ASOS has disclosed a cybersecurity breach that occurred earlier this week. The incident involved an unauthorized party gaining access to an ASOS employee account by impersonating a trusted contact to obtain login credentials.
This access allowed the unauthorized party to view certain personal information of some customers, including their names and contact details. ASOS has stated that payment card information and account passwords were not affected by the breach.
The company confirmed that the compromised credentials were used to access information on specific third-party platforms utilized by ASOS. These platforms have since been locked down to prevent further unauthorized access. ASOS assures customers that its website and app were and remain safe for use.
ASOS is actively working with relevant law enforcement and regulatory authorities regarding the incident. This breach highlights the prevalence of social engineering attacks targeting companies' computer networks.