Asos hacked report deepens as investigation reveals stolen search histories

Asos has issued an update revealing that hackers accessed customer names, addresses, phone numbers, email addresses, and recent search histories. The Guardian and the Irish Examiner both reported that an investigation by the retailer confirmed an unauthorized third party compromised a database containing these details. According to the Independent and the Irish Examiner, the hackers gained log-in access to a third-party service provider by impersonating a trusted contact. [1][2][3][4]

The compromised search data included specific shopping terms typed into the site, such as glamorous wide fit and Asos petite, the Guardian and the Irish Examiner reported. Nine.com.au reported that the hackers contacted the BBC to claim the data breach extended beyond basic contact details. The Guardian and the Irish Examiner both noted that Asos confirmed passwords and payment card details were not accessed during the incident. [1][3][4]

As FTMQ News reported earlier, thousands of Asos customers received app notifications stating the company was hacked, which caused Asos shares to fall by more than 10 percent. The initial alert directed app users to a Telegram account and threatened to leak data compromised from the cloud platform Snowflake unless company officials responded. [6]

LADbible reported that Asos issued a statement explaining how the push notification titled ASOS HACKED appeared on customer screens to raise security concerns. Experts told the Guardian that the inclusion of search terms alongside basic personal information could allow cyber attackers to create highly convincing phishing scams targeting shoppers in the future. [4][5]