ASOS links customer data exposure to stolen employee credentials

ASOS confirmed that attackers obtained an employee's login credentials by impersonating a trusted contact and used them to access information on third-party platforms. Its latest customer update identifies exposed data as full names, contact details, and certain non-personal account-related information. The retailer says attackers did not access payment card information or account passwords. It locked down the affected platforms and is investigating with external experts, law enforcement, and regulatory authorities. ASOS warned customers to be cautious of unexpected messages or calls claiming to come from the company. The investigation remains underway, and the number of affected customers has not been reported.