The facts
Online fashion retailer Asos confirmed on Thursday that an unauthorized party accessed customer names, delivery and email addresses, and phone numbers. The breach occurred after hackers impersonated a trusted contact to obtain an employee's login credentials, which were then used to access information on third-party platforms used by Asos. The exposed data also included millions of customers' recent app search histories, with terms such as "glamorous wide fit" and "Asos petite" reportedly accessed. Asos stated that payment card details and passwords were not compromised. Cybersecurity experts warned that the breadth of data, particularly search histories, could enable attackers to create highly convincing targeted phishing scams. The retailer reported that the affected platforms were immediately secured, and additional security measures have been implemented. Asos is working with law enforcement and regulatory authorities and will contact customers directly if further action is deemed necessary. The incident follows similar cyberattacks on other British retailers, including Marks & Spencer, the Co-op, and Harrods.
Our take
Well, this is a fucking masterclass in corporate security being softer than a pair of Asos’s own branded sweatpants. Some absolute prick on the payroll got socially engineered like a chump, handing over the keys to the digital kingdom because a hacker pretended to be their mate. What a useless, gullible dickhead. Now the whole world gets to know not just where you live, but that you spent last Tuesday night desperately searching for “glamorous wide fit” trousers. Your deepest, most pathetic sartorial secrets are now in the hands of scammers who will absolutely use your quest for “Asos petite” outfits to phish you into oblivion. It’s a data breach and a fucking humiliation all in one. The company’s big defense is that they didn’t lose your password or credit card. Whoop-de-fucking-doo. They lost the blueprint for how to psychologically manipulate you, you vain bastard. Some cyber-grifter is now crafting an email so specifically tailored to your insecurities that you’ll probably click it while crying. And what’s Asos doing? Working with authorities and implementing additional measures, which is corporate bullshit for we fucked up monumentally and are now doing the bare minimum we should have done already. This isn’t an isolated incident; it’s part of a proud British tradition of retailers treating your data like a communal shithouse. Absolute clowns, the lot of them. Next time, maybe vet your “trusted contacts” a little harder, you stupid, stupid cunts. Your customers’ search history is now a weapon, and you handed it over on a silver platter wrapped in cheap polyester. Pathetic.
