ASOS confirms probe into an unauthorised entry to its mobile app systems after customers received an alert saying hackers had “fully compromised” data. ASOS said it is investigating the incident and has sent notifications to affected shoppers, while the company’s stock price fell nearly 10% following the disclosure. The retailer has described the actor as an unidentified third party and is conducting a rapid review of the scope of the access.
The company has indicated that the information potentially exposed is limited to basic personal details such as customer names and contact information. ASOS added that it does not believe payment card records or account passwords were accessed. The message that reached users prompted immediate concern among some customers about the integrity of their accounts, and the firm emphasised that the investigation remains ongoing.
The incident sits within a wider context in which digital retail platforms are high-value targets for criminals seeking personal data. Data security events of this kind can carry operational and regulatory consequences: under EU data protection rules, organisations may be required to assess and report breaches of personal data. Market reaction to cybersecurity news can be swift, as evidenced by the near-10% decline in the company’s shares after the alert reached customers. Analysts and compliance teams typically watch such episodes for implications on customer trust and operational resilience.
ASOS said it is communicating with impacted users and pursuing technical remediation while the inquiry continues. Customers who received notifications have been advised to follow official communications from the retailer and to monitor their accounts and communications for any unusual activity. The company has not announced any indication of payment card or password exposure as the probe proceeds, and further updates are expected as the investigation delivers clearer findings on the nature and scale of the access to its app systems. For wider information about similar incidents, see the site’s coverage of data breach developments.