Asos hackers took more personal details than first revealed, BBC finds
Asos has confirmed that a recent cyberattack resulted in the theft of detailed personal customer profiles, including names, addresses, and search history. While financial data remains secure, the company is warning users to be vigilant against potential phishing and impersonation scams.
Why it matters
This breach highlights the growing risk of data exploitation beyond simple financial theft, as criminals use personal behavioral data to craft more effective social engineering attacks.
Image source, Alamy By Joe Tidy Cyber correspondent, BBC World Service Published 8 October 2026, 10:29 BST Updated 5 hours ago Asos has told its customers that hackers are in possession of detailed profiles of potentially millions of the online store's users.
It issued the update after BBC News told the retailer it had been contacted by cyber criminals who said this week's breach went beyond the "basic contact details" Asos previously said might have been accessed.
Names, addresses, phone numbers, emails, customer numbers and dates of birth are now in the hands of criminals.
One victim told the BBC it was "very unsettling" that the hackers now know these things about her.
The criminals also have access to the searches customers have made on the website. Terms like "reclaimed vintage", "glamorous wide fit" and "Asos petite" are visible in the data.
Also covering this story
One other newsroom covered this event. We read that version too.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in