ASOS is investigating a cyber incident after some customers received an unauthorised push notification on Tuesday 6 October. The company has said names and contact details were accessed. It says it does not believe payment card information or account passwords were affected.
The National Cyber Security Centre advises anyone with an ASOS account to 'assume you are affected' even if they did not receive the unauthorised notification. The NCSC tells people to consult its data breach guidance, to look out for suspicious messages that can arrive some time after a breach, and not to click on any suspicious links received by push notification, email or message. New guidance is also available on response and recovery after a highly disruptive incident.
What it means for your business
Check whether staff or customers use ASOS accounts or share contact details that could be reused by attackers. Remind staff and customers to treat unexpected push notifications and messages as suspicious and not to click links. Review your incident response steps for handling customer data exposure and follow NCSC data breach guidance if you need to notify affected parties or regulators.
This brief was written automatically from the source above and summarises it. It is not legal, tax or financial advice.