Back to all incidents

ASOS

asos.com
CONFIRMED

Hackers compromised a third-party communication platform and sent rogue notifications to ASOS users. The post ASOS Confirms Cyberattack, Data Breach appeared first on SecurityWeek .

Observable Status CONFIRMED
Industry / Sector Technology & Commercial
Incident Classification Network Intrusion & Data Exfiltration
Attributed Threat Actor Unattributed / Unknown
Affected Population Scope Under Audit
First Seen 2026-10-06
Last Updated 2026-10-09
Authentication Credentials
OPEN WEIGHTS TELEMETRY • DETERMINISTIC CONFIDENCE

Confidence & Source Corroboration

100% CONFIDENCE
1. Primary Authority CONFIRMED BY REGULATOR Base weight: 65%
2. Evidence Specificity +7% Domain & Scope Telemetry
3. Corroboration Curve +25% 8 independent domains
4. Timeline & Staleness +5% 9 milestones logged
Corroborated Source Domains:
securityweek.com bbc.co.uk databreaches.net bleepingcomputer.com ncsc.gov.uk theregister.com infosecurity-magazine.com darkreading.com

Technical Forensic Briefing

Incident Overview

ASOS, within its operating sector, has been subject to a cybersecurity incident initially observed on 2026-10-06. Ground-truth telemetry indicates the threat activity is currently unconfirmed or under forensic attribution.

Hackers compromised a third-party communication platform and sent rogue notifications to ASOS users. The post ASOS Confirms Cyberattack, Data Breach appeared first on SecurityWeek .

Compromised Assets & Data Scope

The specific volume of affected customer or organizational records remains under active forensic investigation. Primary affected online infrastructure and perimeter domains include asos.com.

Identified categories of compromised data and impacted assets include:

  • Authentication Credentials

Authoritative Directives & Vendor Disclosures

  • Continuous Telemetry Monitoring: Formal statutory regulatory filings (SEC Form 8-K, State AG portals) and sovereign agency advisories (CISA, NCSC) are continuously monitored via automated ingestion pipeline.

Milestone Timeline (9 events logged)

2026-10-07 09:46 UTC
CONFIRMED BY TARGET

ASOS Confirms Cyberattack, Data Breach

2026-10-06 17:50 UTC
Media Pickup CONFIRMED BY TARGET

Mainstream Media Pickup: Asos confirms hackers sent 'unauthorised' notification to app users

2026-10-06 12:00 UTC
Media Pickup INDEPENDENT VERIFICATION

Press Coverage: ASOS customers receive ‘hack’ notification threatening leak

2026-10-08 11:42 UTC
Media Pickup INDEPENDENT VERIFICATION

Press Coverage: ASOS links data breach to social engineering attack, credential theft

2026-10-06 12:00 UTC
CONFIRMED BY REGULATOR

Incident affecting ASOS customers

2026-10-08 11:01 UTC
Media Pickup INDEPENDENT VERIFICATION

Mainstream Media Pickup: Asos hackers took more personal details than first revealed, BBC finds

2026-10-06 11:51 UTC
Media Pickup UNVERIFIED CLAIM

Press Coverage: Asos app delivers a data leak threat instead of fast fashion

2026-10-08 13:36 UTC
Media Pickup CONFIRMED BY TARGET

Press Coverage: ASOS Confirms Data Breach Linked to Stolen Employee Credentials

2026-10-09 20:58 UTC
Media Pickup INDEPENDENT VERIFICATION

Press Coverage: ASOS Breach Reveals the Risks in Customer-Facing SaaS

Have updated information or a new verifiable source?

This incident record is a flat Markdown file tracked in Git. Propose an update or add a milestone via Pull Request.

Propose Update via GitHub