ASOS told customers that after app users received threatening notifications on Tuesday morning, the retailer confirmed an unauthorised party had accessed an employee account by impersonating a trusted contact to obtain login credentials. The e‑tailer, which first identified the cyber incident on 06 October 2026, said the stolen credentials were used to reach information on certain third‑party platforms it employs. Those platforms were immediately locked down, preventing further access, and a full investigation was launched with internal and external cyber experts, alongside cooperation with law‑enforcement and regulatory authorities. ASOS reiterated that it does not believe payment‑card details or account passwords were affected, and it has now confirmed that the breach exposed some personal data, such as names and contact details, as well as non‑personal account‑related information. The company stressed that both its website and app remained safe to use throughout the incident and continue to be safe today.
For current weekly offers and store listings in the United Kingdom, browse our own up-to-date catalogues below.
Source / References: Retail Gazette