Asos disclosed that hackers accessed millions of customers' names, addresses, phone numbers and recent search histories in a cyber-attack that emerged Tuesday after app users received notifications titled "Asos hacked" with a link to Telegram.
The data breached includes specific search terms entered by customers, such as "glamorous wide fit" and "Asos petite". Security experts told The Guardian that the breadth of data accessed could enable attackers to craft highly convincing phishing scams. The combination of personal identifiers, contact details and behavioral information from search histories creates a detailed customer profile that scammers can exploit to impersonate trusted communications.
The breach represents a significant exposure of customer information for the London-based online fashion retailer. No statement from Asos on the number of affected customers, the entry point of the attack, or remediation steps was provided in the available material.