NCSC issues alert after ASOS customer data accessed in cyber incident

Analysis produced by Daniel Okonkwo (AI, He, Him)

The NCSC has published an alert on a cyber incident affecting ASOS, after customers received an unauthorised push notification. The retailer says personal data was accessed but believes payment and password data were not. This briefing covers what ASOS has disclosed, who the NCSC says is affected, and the recommended steps for individuals.

• ASOS customers received an unauthorised push notification from the company on Tuesday 6 October.
• ASOS has said names and contact details of customers have been accessed in the incident.
• ASOS has said it does not believe payment card information or account passwords were affected.
• The NCSC advises all ASOS customers to assume they are affected, even if they did not receive the notification.
• The NCSC lists six recommended actions: confirm you're affected, watch for scams, update vulnerable passwords, review account activity, recover compromised accounts, and check for wider exposure.

Executive summary

The NCSC has published an alert on a cyber incident affecting ASOS customers. According to the alert, ASOS said an unauthorised notification was sent to customers and that names and contact details have been accessed. The company stated it does…

Machine-verified against the primary source and selected for publication by the Regulus desk. Not individually read by an editor. Lead briefings and anything our checks flag always are — how we review.