Asos has said an “unauthorised party” gained access by impersonating a trusted contact to get log-in information, after customers received a phone alert saying that the retailer had been hacked.
The fast fashion business told customers to “remain cautious” over unexpected messages or calls claiming to be from Asos, in an email on Thursday morning.
Investigation findings
It comes after customers received a mobile app notification on Tuesday, titled “Asos hacked”, which directed them to a Telegram account.
Asos said it has undertaken a detailed investigation over the past 48 hours and found an “unauthorised party gained access to an Asos employee account by impersonating a trusted contact to obtain log-in credentials”.
It said the party then used the credentials to access information on third-party platforms used by Asos.
Data accessed and security measures
Affected platforms were immediately locked down but Asos said the attacker gained access to some personal data, including names and contact details.
The also were able to access “certain non-personal account-related information”, Asos said.
But it stressed that no payment card information or account passwords were accessed.
