Continuing story · 1 report

The Asos app customer data incident

First aired Latest aired

Developing

Where it stands

By 8 October 2026, ASOS says hackers possess detailed customer profiles that may involve millions of users, including names, contact details, customer numbers and website searches. The number of affected customers and profiles, and the amount of information downloaded, remain undisclosed; the investigation and resolution are still open.

Explore with HeyDex

Follow via RSS

Story trackerDay 3

1 report32 outlets42 sources2 videos

  1. Update 1ASOS hackers took customer searches—and the details to make scams convincing

The story so far

  1. Update 1

    ASOS hackers took customer searches—and the details to make scams convincing

    Contact details and shopping searches appeared together in an attacker-supplied sample. ASOS says financial information and passwords were not accessed, but customers still lack a definitive accounting of whose records were taken.

    What moved

    • The disclosure expands to detailed customer profiles, website searches and access using stolen employee credentials.

    Still open after this report

    • The final affected-person count, access window, complete service list and confirmed ICO notification date remain undisclosed or unestablished.

History

  1. Opened1 report

Who's involved

People

  • Anastasia TikhonovaRussian tennis player (born 2001)1 report

Organizations

  • ASOSBritish online fashion and beauty retailer1 report
  • Information Commissioner's OfficeBritish data protection authority1 report

Every outlet we read on this story

42 sources32 outlets2 videos

Who reported what

24 points0 confirmed by two or more outlets16 from a single outlet0 disputed

What 4 outlets reported about this story, point by point, and who reported each point first.

Points more than one outlet reported

Each column is an outlet, in the order they first reported. Select a mark to read that outlet's wording.

  • Reported it first
  • Reported it
  • Repeated another outlet
  • Did not report it
PointBBC NewsFRANCE 24 EnglishSBS NewsThe GuardianOutlets
Whether customer personal information was accessedNot independently confirmed4
Customers receiving an unauthorised app notificationNot independently confirmed3
Whether payment-card information was affectedNot independently confirmed3
Whether account passwords were affectedNot independently confirmed3
ASOS share-price movementNot independently confirmed3
How an attacker obtained employee login credentialsNot independently confirmed2
Customer searches included in stolen dataNot independently confirmed2
Whether the ASOS website and app were operating normallyNot independently confirmed2

Points only one outlet reported

Only reported by BBC News

Only reported by SBS News

Only reported by The Guardian

Each line is the claim as we recorded it from that outlet's report. Compared as of .