Asos warns customers about full extent of data breach after BBC contacted by hackers
Retailer Asos has warned customers that a recent data breach is more severe than initially reported, with hackers now in possession of detailed user profiles. The stolen data includes names, addresses, and specific search history, raising concerns about potential phishing and impersonation scams.
Why it matters
This highlights the growing risk of data security in e-commerce and the potential for sophisticated social engineering attacks using stolen consumer behavioral data.
Image source, Getty Images By Joe Tidy Cyber correspondent, BBC World Service Published 14 minutes ago Asos has told its customers hackers are in possession of detailed profiles of potentially millions of the online store's users.
It issued the update after BBC News told the retailer it had been contacted by cyber criminals who said this week's breach went beyond "basic contact details" Asos previously said might have been accessed.
Names, addresses, phone numbers, emails and customer numbers are now in the hands of cyber criminals.
So too are the searches customers have made on the website. Terms like "reclaimed vintage", "glamorous wide fit" and "Asos petite" are visible in the data.
With this information, scammers may be able to craft potent phishing attack emails or phone calls.
The risk to individuals is now higher and customers are being warned about potential impersonation scams.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in