The personal details of online shoppers were compromised in a security incident that far exceeded the scope of the company’s initial reports. The UK-based fashion retailer Asos has now informed customers that hackers stole site search histories, addresses, phone numbers, emails, and customer account numbers, surpassing the “basic personal information” it had acknowledged previously.
The breach was first revealed on Oct 6 when shoppers received app notifications from a group calling itself Xuanye Group, which claimed to have compromised a Snowflake instance. Asos shares fell 11% on the news, the steepest one-day drop in a year. The retailer has restricted access to the communication platforms used by the hackers and is investigating the attack with cybersecurity specialists.