Asos hackers took more personal details than first revealed, BBC finds

Asos has confirmed that a recent cyberattack resulted in the theft of detailed personal information from millions of users, including addresses and search histories. While financial data remains secure, the company is warning customers to be vigilant against phishing scams.
Why it matters
Data breaches of this scale pose significant security risks to consumers and highlight the ongoing vulnerability of major e-commerce platforms.
Share Save Add as preferred on Google Joe Tidy Cyber correspondent, BBC World Service Alamy Asos has told its customers that hackers are in possession of detailed profiles of potentially millions of the online store's users.
It issued the update after BBC News told the retailer it had been contacted by cyber criminals who said this week's breach went beyond the "basic contact details" Asos previously said might have been accessed.
Names, addresses, phone numbers, emails, customer numbers and dates of birth are now in the hands of criminals.
One victim told the BBC it was "very unsettling" that the hackers now know these things about her.
The criminals also have access to the searches customers have made on the website. Terms like "reclaimed vintage", "glamorous wide fit" and "Asos petite" are visible in the data.
Harriet has been using Asos since 2019 - another detail the hackers now know.
Also covering this story
One other newsroom covered this event. We read that version too.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in