Asos confirms customer data breach by hackers posing as trusted contact

Online retailer Asos has confirmed hackers accessed customer profiles after impersonating a trusted contact to obtain an employee's login credentials.

• Asos confirmed hackers accessed customer names, addresses, phone numbers, emails and search histories during the breach.
• The retailer said no payment card details or passwords were accessed.
• Users received a Tuesday push notification titled "Asos hacked" linking to Telegram, sending Asos shares down about 10%.
• The hackers behind the breach shared a sample of the stolen data with the BBC, prompting Asos' expanded disclosure.