Incident affecting ASOS customers
NCSC says ASOS customer names and contact details may have been accessed after unauthorized notifications.
The UK NCSC said some ASOS customers received an unauthorized push notification on 6 October 2026. ASOS is investigating and stated that names and contact details may have been accessed. The company does not believe payment card information or account passwords were affected. NCSC advises every ASOS customer to assume they are affected, avoid suspicious links, and watch for follow-on phishing.
- Unauthorized ASOS push notifications were sent on 6 October 2026.
- Names and contact details may have been accessed.
- ASOS does not believe payment cards or passwords were affected.
- NCSC says all ASOS customers should assume they are affected.
- Customers are warned to watch for later phishing and avoid suspicious links.
Full article255 words · extracted from ncsc.gov.uk · click to collapse
Summary
ASOS has said that an unauthorised notification was sent to their customers and that names and contact details of their customers may have been accessed.
The company has said it does not believe payment card information or account passwords were affected.
What has happened?
Some ASOS customers received an unauthorised push notification from ASOS on Tuesday 6th October.
The company is investigating the unauthorised activity and has stated that basic personal information including name and contact details may have been accessed. They have said they do not believe payment card information or account passwords have been impacted.
Who is affected?
If you are an ASOS customer, you should assume you are affected by this incident, even if you did not receive the unauthorised notification.
What should I do?
See our data breach guidance for information on what you should do when you are affected by an incident like this.
Look out for suspicious messages, which can arrive some time after a data breach incident.
Do not click on any suspicious links, including those you receive in push notifications, or via emails or messages.
Although ASOS have stated that they do not believe payment details or account passwords are affected:
- See the Stop! Think Fraud guidance on how to report fraud in the UK
- Follow our Top tips for staying secure online – using passkeys, or strong, separate passwords plus two-step verification for your accounts will keep you secure even if your data is breached.
Actions to take
- 1
- 2
- 3
- 4
- 5
- 6
Text extracted automatically; images, tables and formatting may be missing. Original: https://www.ncsc.gov.uk/news/incident-affecting-asos-customers