Arabic version: أسوس تحذر المستخدمين بعد اختراق كشف ملفات شخصية مفصلة للعملاء

According to BBC News, Asos has warned customers that cyber criminals obtained detailed profiles of potentially millions of users after the BBC was contacted by people claiming responsibility for the breach.

The retailer had previously said that basic personal information, including names and contact details, might have been accessed. It has now told customers that the stolen information includes names, addresses, phone numbers, email addresses, customer numbers and searches made on its website.

Search terms visible in the data included “reclaimed vintage”, “glamorous wide fit” and “Asos petite”. The information could help scammers create convincing phishing messages or calls, raising the risk of impersonation attempts.

Asos said no bank details or passwords were accessed. It urged customers to be cautious of unexpected communications claiming to be from the company, adding that it would never ask for passwords, security codes or payment details through an unsolicited message or call.

The company said attackers gained access to an Asos employee account by impersonating a trusted contact to obtain login credentials. Asos is still investigating the incident, said its website and app remain safe to use, and said it has taken additional steps to strengthen security controls.