- Asos Plc
- 08 October 2026 17:09:08
Source: Sharecast
Asos said in an update on the incident on Tuesday that basic personal information including name and contact details may have been accessed. However, in an email to customers on Thursday, the online fashion retailer said that a 48-hour investigation had found that hackers also gained access to "certain non-personal account related information".
Asos did not elaborate, but according to a BBC report, shoppers’ recent search history on the app was accessed. This includes terms like "reclaimed vintage", "glamorous wide fit" and "Asos petite".
However, no payment card information or account passwords were accessed and Asos insisted that its website and app were "safe to use throughout, and remain safe to use today".
"The affected platforms were immediately locked down, ensuring that no further information could be accessed and a full investigation was launched with the support of both internal and external cyber experts," Asos said. "We are also working with the relevant law enforcement and regulatory authorities."
The company told customers they did not need to take any action on their accounts. However, it asked that they "remain cautious of unexpected messages or calls" claiming to be from the retailer.
"We will never ask you to share passwords, security codes or payment details through an unsolicited message or call," it said.
Asos said its investigation is now complete and it will contact customers directly where it believes additional information, support or action may be required.
"We know our customers trust us with their information. We take that responsibility seriously and have already taken additional steps to further strengthen security controls," it said.
Asos shares closed up 2.3% at 461.50p.
Danni Hewson, head of financial analysis at AJ Bell, said: "Although the business doesn’t appear to have suffered an attack of the scale that hit Marks & Spencer last year, customers are being warned to be extra vigilant.
"There is the potential that the kind of data reportedly accessed could enable hackers to carry out incredibly sophisticated and highly personalised phishing attacks. Consumers need to make sure any communication from ASOS is authentic and make sure they don’t hand over sensitive financial information."