Asos has disclosed that a cyberattack on its systems allowed unauthorized parties to access sensitive information belonging to millions of its customers. The breach, which was made public on Tuesday, exposed personal details including names, residential addresses, and phone numbers, as well as recent search histories recorded on the platform.
The incident came to light after users of the Asos mobile application received a notification with the subject line “Asos hacked,” which directed them to a link hosted on the Telegram messaging service. Security experts have warned that the extensive nature of the accessed data could enable attackers to craft highly persuasive phishing scams targeting the affected individuals.
Among the compromised search records were specific product queries entered by users, such as “glamorous wide fit” and “Asos petite.” The breach highlights the potential risks associated with the aggregation of personal identifiers and behavioral data in e-commerce environments.
At least they disclosed it quickly. Still, seeing my search history like ‘wide fit dresses’ on a breach list is awkward.
I’ve already changed my passwords. Can’t believe they left contact details so vulnerable. Disappointed in their response time.
This is ridiculous. Asos needs better security protocols immediately. My address and name are now public knowledge?
Search history? Really? I felt exposed just reading about this. Big data aggregation is a huge risk.
I received that Telegram notification yesterday. Scary how precise the phishing attempts will be now.