Asos has said hackers accessed customer data including names, postal addresses, phone numbers and recent search histories during a cyber-attack disclosed to users this week.
The scale of the breach includes millions of customers’ recent searches, according to reporting by The Guardian. Search terms in the compromised data included phrases such as "glamorous wide fit" and "Asos petite".
Users of the retailer’s app received a notification headed "Asos hacked", directing them to the Telegram messaging service. The disclosure brought public attention to the incident after the notification appeared on Tuesday.
Cybersecurity experts warned that the combination of contact details, addresses and shopping-related searches could enable highly tailored phishing messages. Attackers may use such information to make fraudulent communications appear more credible to recipients.
The case highlights the wider exposure created when retail platforms hold detailed records of customer browsing and purchasing intent alongside personal contact information. Customers should treat unsolicited messages about accounts, deliveries or refunds with caution and verify them through official channels.