INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

ASOS suffers data breach linked to social engineering attack

| 2026-10-08 11:42 HIGH HIGH DATA BREACH PHISHING & SOCIAL ENGINEERING
JSON
Executive Summary
AI-generated
A recent data breach at UK-based online fashion retailer ASOS was caused by a social engineering attack in which hackers stole an employee's login credentials and used them to access information on third-party platforms. The attackers, claiming to be from "Xuanye Group", impersonated a trusted contact to obtain the employee's log-in credentials, then accessed certain third-party platforms used by ASOS. This incident affected some customers, with exposed personal data including full names, contact details, and non-personal account-related information. ASOS has confirmed that payment card information or account passwords were not accessed. The company launched an investigation with external experts, law enforcement, and regulatory authorities after discovering the breach on October 6, 2026, and has since taken steps to implement additional security measures to prevent similar incidents in the future.
Technical Mitigations AI-generated
• Use multi-factor authentication (MFA) to protect employee accounts and prevent credential theft. • Implement a robust security notification system that alerts employees of suspicious activity, such as the push notifications sent by ASOS customers. • Regularly monitor third-party platforms used by ASOS for unauthorized access attempts.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
FIVE_EYES FIVE_EYES retailretail
Incident Timeline
‎October 6, 2026
Malicious actors from the "Xuanye Group" sent phishing-like in-app notifications to ASOS customers on October 6, 2026.
industry Retail
General Document Context
organisation “Xuanye Group
Malicious ASOS in-app notifications sent by hackers The threat actor, calling themselves “Xuanye Group,” claimed that they had stolen customer data, but not payment information.
organisation NFL
Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed.
organisation CHANEL
Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed.
‎2026/10/08
Threat actors impersonated a trusted contact to obtain an ASOS employee's login credentials, which were then used to access information on third-party platforms.
organisation ASOS
"We discovered that an unauthorised party gained access to an ASOS employee account by impersonating a trusted contact to obtain log in credentials," reads an ASOS security notification shared with BleepingComputer.
organisation BleepingComputer
"We discovered that an unauthorised party gained access to an ASOS employee account by impersonating a trusted contact to obtain log in credentials," reads an ASOS security notification shared with BleepingComputer.
Intelligence Sources
BleepingComputer 2026-10-08