Skip to content
WorldBrand.AI
HomeAboutBrand WikiAEOWorld ModelComing SoonBlog
WorldBrand.AI

The intelligence platform for brands in the AI era.

Products
  • AEO Intelligence
  • Brand Wiki
  • World Model
  • Enterprise
Company
  • About
  • Blog
  • Pricing
Brand Wiki
  • About Brand Wiki
  • Methodology
  • Sources
  • Editorial policy
  • API

© 2026 WorldBrand.ai. All rights reserved.

Privacy PolicyTerms of Use

ASOS/Controversies

ASOS controversies

Controversies tied to this brand in public sources. A listing is not a finding of fault.

Back to profile

  1. 2026ASOS says hackers took detailed customer data beyond initially reported scope
  2. 2026ASOS discloses data breach exposing customer names and contact details
  3. 2026Hackers send extortion message via ASOS app push notifications claiming Snowflake compromise
  4. 2020COVID-19 warehouse-safety criticism
  5. 2016Warehouse working-conditions allegations
  1. 2026

    ASOS says hackers took detailed customer data beyond initially reported scope

    Issue disclosure

    ASOS told customers that hackers were in possession of detailed profiles of potentially millions of users of the online store, including names, addresses, phone numbers, emails, customer numbers and website search terms. The disclosure followed cyber criminals contacting the BBC and saying the breach went beyond the "basic contact details" ASOS had previously said might have been accessed. ASOS confirmed the data profiles were taken but said no bank details or passwords were accessed. It said it was still investigating the data breach and had already taken additional steps to strengthen security controls. The hackers gained access to an employee account by impersonating a trusted contact to obtain login credentials, and customers were warned about potential impersonation scams.

    Asos has told customers that hackers are in possession of detailed profiles of potentially millions of users of the online store, including names, addresses, phone numbers, emails, customer numbers and website search terms, after cyber criminals contacted the BBC saying this week's breach went beyond the "basic contact details" Asos previously said might have been accessed. Asos confirmed data profiles were taken but said no bank details or passwords were accessed, said it is still investigating the data breach, and said it has already taken additional steps to strengthen security controls. The hackers gained access to an employee account by impersonating a trusted contact to obtain login credentials, and customers are being warned about potential impersonation scams.

    Company response

    • Clarification — Asos

      In its email to customers, Asos confirmed data profiles were taken but said no bank details or passwords were accessed.
    • Investigation — Asos

      Asos said it is still investigating the data breach and it would "contact customers directly where we believe additional information, support or action may be required".
    • Remediation — Asos

      "We take that responsibility seriously and have already taken additional steps to further strengthen security controls," it said.

    Source excerpt

    • Asos has told its customers that hackers are in possession of detailed profiles of potentially millions of the online store's users.
    • It issued the update after BBC News told the retailer it had been contacted by cyber criminals who said this week's breach went beyond the "basic contact details" Asos previously said might have been accessed.
    • Names, addresses, phone numbers, emails and customer numbers are now in the hands of cyber criminals.
    Source
  2. 2026

    ASOS discloses data breach exposing customer names and contact details

    Issue disclosure

    British online fashion retailer ASOS disclosed a data breach that hit its customers on Tuesday. According to ASOS' initial investigation, an unauthorised party gained access to an ASOS employee account by impersonating a trusted contact to obtain login credentials, and those credentials were used to access information on certain third-party platforms used by ASOS. The breach exposed customers' names and contact details as well as certain non-personal account-related information, while the company said payment card information and account passwords were not breached. Hackers had sent an unauthorised notification to users claiming to have fully compromised the Snowflake instance. ASOS immediately locked down the affected third-party platforms, apologised to its 16.5 million customers for any uncertainty caused, and said it is actively cooperating with law enforcement and regulatory authorities.

    Company response

    • Apology — ASOS

      In an update sent to its 16.5 million customers, ASOS apologised for the incident “any uncertainty this caused”.
    • Clarification — ASOS

      But when it comes to financial-related information, the company said they found no breach in payment card information and account passwords, as mentioned in an email sent to customers.
    • Investigation — ASOS

      it is actively cooperating with relevant law enforcement and regulatory authorities regarding the breach.
    • Remediation — ASOS

      the retailer immediately locked down the affected third-party platforms to prevent the access of information at the hand of unauthorized entities.

    Source excerpt

    • the retailer immediately locked down the affected third-party platforms to prevent the access of information at the hand of unauthorized entities.
    • British online fashion retailer ASOS has issued a recent update regarding the recent data breach that hit its customers on Tuesday.
    • According to the retailer, in the hacking incident personal details were accessed after an “unauthorised notification” was sent out to users in a new update.
    Source
  3. 2026

    Hackers send extortion message via ASOS app push notifications claiming Snowflake compromise

    Issue disclosure

    On 6 October 2026, dozens of ASOS users across the UK received push notifications from the retailer's app that appeared to have been sent by hackers attempting to extort the company. The message, addressed to ASOS's data protection officer and IT team, claimed the attackers had 'fully compromised the Snowflake instance' and demanded engagement or data would be leaked. Security experts noted that sending the push notifications would require access to ASOS's notification system, separate from the claimed Snowflake compromise. A new group calling itself Xuanye Group created a Telegram channel the same day and posted about the ASOS hack. ASOS did not immediately respond to requests for comment.

    Source excerpt

    • Asos users across the UK have been sent pop-up messages from its app that appear to have been sent by hackers trying to extort the company.
    • Dear ASOS DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it
    • The new group is calling itself Xuanye Group and only created its Telegram channel today.
    Source
  4. 2020

    COVID-19 warehouse-safety criticism

    Some workers and unions accused ASOS of failing to protect staff adequately during the pandemic. The company disputed the accusations, while Barnsley Council reported that the inspected site was complying with requirements.

    Source
  5. 2016

    Warehouse working-conditions allegations

    A BuzzFeed News investigation alleged poor conditions at an ASOS warehouse. ASOS said the complaints cited were isolated and did not describe general working conditions across the business.

    Source