Featured image: A person's hand is holding a silver smartphone. AI-generated image; not a photograph of the reported event.
Asos has confirmed hackers accessed more personal data than first reported. Source: bbc.co.uk.
What Was Stolen
Stolen data includes names, addresses, phone numbers, email addresses, customer IDs, and dates of birth.
Customers’ search history is also exposed — terms like ‘reclaimed vintage’ or ‘Asos petite’ appear in the data.
One user said it was unsettling that hackers now know she’s used the site since 2019.
How the Attack Happened
Attackers gained access to an Asos employee account by impersonating a trusted contact.
Using that access, they logged into an unnamed service and downloaded customer data.
The hackers used a platform called Simon AI, which runs on Snowflake — a data storage service.
Asos confirmed the pop-up alert sent to users was from an unauthorized third party, not the company.
Key Facts
- Names, addresses, phone numbers, emails, customer IDs, and birth dates were accessed.
- Customer search history is visible in the stolen data.
- Asos has not confirmed how many users were affected.
- No bank details or passwords were accessed.
- The website and app remain safe to use.
Why This Is a Risk
Stolen data can be used in phishing attacks — fake messages that mimic trusted sources.
Attackers can use real names and search habits to make scams seem more personal and urgent.
Users should be wary of any unsolicited message from Asos asking for passwords or payment details.
What to Watch For
Be alert for messages that:
- Ask for personal details or password changes.
- Use real search terms or personal data to appear genuine.
- Claim your account will be locked in 24 hours — a common scam tactic.
Asos says it is still investigating and will contact users if more support is needed.
The company has taken extra security steps but has not shared details.
For more, see our original report.
Asos has not responded to questions about the full scale of the breach or how many users were affected.
Experts note that while passwords weren’t stolen, the personal data increases the risk of targeted scams.
Asos says it takes customer trust seriously and continues to protect user data.
