NCSC issues alert after ASOS customer data accessed in cyber incident
The NCSC has published an alert on a cyber incident affecting ASOS, after customers received an unauthorised push notification. The retailer says personal data was accessed but believes payment and password data were not. This briefing covers what ASOS has disclosed, who the NCSC says is affected, and the recommended steps for individuals.
- ASOS customers received an unauthorised push notification from the company on Tuesday 6 October.
- ASOS has said names and contact details of customers have been accessed in the incident.
- ASOS has said it does not believe payment card information or account passwords were affected.
- The NCSC advises all ASOS customers to assume they are affected, even if they did not receive the notification.
- The NCSC lists six recommended actions: confirm you're affected, watch for scams, update vulnerable passwords, review account activity, recover compromised accounts, and check for wider exposure.