Teollimi

ASOS data breach

Was I affected?

ASOS confirmed a breach affecting an undisclosed number of people, exposing names, addresses, phone numbers and email addresses. You may be affected if you have an ASOS account, especially if you received the 'ASOS HACKED' app notification or an email from ASOS about it in October 2026.

ASOS breach facts
AnnouncedOct 6, 2026
When it happenedDisclosed October 6, 2026
CountryUnited Kingdom
Data exposedNames, Addresses, Phone numbers, Email addresses and Other details
StatusConfirmed by the company or a regulator filing

What happened

UK online fashion retailer ASOS confirmed on October 6, 2026 that an unauthorized party accessed third-party platforms it uses to communicate with customers, after hackers calling themselves 'Xuanye Group' pushed an 'ASOS HACKED' alert to app users claiming to have compromised its Snowflake instance. ASOS later said the attackers got into an employee account by impersonating a trusted contact to obtain login credentials. In a London Stock Exchange filing it said names and contact information were taken; BBC News, as cited by TechCrunch, reported that home addresses, phone numbers, email addresses and notes such as website search queries were included. ASOS says payment card information and account passwords were not affected, and it has not said how many customers are involved.

What should I do?

  1. Ignore and delete messages claiming to be from ASOS that ask for passwords, security codes or payment details; ASOS says it never asks for these unsolicited.
  2. Do not open the Telegram link from the rogue app notification.
  3. Expect phishing emails, texts and calls that use your name, address or phone number and mention orders or refunds; check orders in the ASOS app instead.
  4. If you reused your ASOS password elsewhere, changing it is a reasonable precaution even though ASOS says passwords were not affected.
XRedditWhatsApp

More data breaches in the United Kingdom →

Check the other services you use →

Sources