ASOS Confirms Customer Data Breach Following Employee Account Hack

The company disclosed that the breach originated from a compromised employee credential, which attackers utilized to infiltrate external systems connected to the retailer. ASOS confirmed that while names and contact information were exposed, critical data such as payment card numbers and account passwords remained untouched during the intrusion.

Internal teams and external cybersecurity specialists are currently conducting a forensic review of the breach. The retailer is coordinating with law enforcement and regulatory bodies to manage the fallout. Customers have been advised to exercise heightened caution regarding unsolicited communications, though ASOS maintains that its primary app and website are safe for continued use. The company plans to reach out directly to any individuals whose data may require specific protective actions.