Asos users have been hit by a data breach that goes beyond just basic contact information, according to the BBC. Personal details including names, addresses, phone numbers, email addresses, customer numbers, and dates of birth are now in the hands of cyber criminals. The hackers also have access to customers' search history on the site, revealing what items they are interested in, such as 'reclaimed vintage' and 'Asos petite'.

One customer, Harriet, told the BBC that this is 'very unsettling', given the potential for future attacks. The risk of phishing and impersonation scams has increased, with Asos advising customers to be cautious of unsolicited messages or calls claiming to be from the company. The breach was discovered after cyber criminals contacted the BBC with a sample of the stolen data, highlighting the severity of the hack.

Despite confirming that no bank details or passwords were accessed, Asos is urging customers to change their passwords as a precaution. The company states that its website and app are safe to use and that it has taken additional steps to strengthen security. However, experts warn that passwords have not been stolen, so users should be highly suspicious of any unsolicited requests for password changes.

The hack was discovered when cyber criminals used Asos's own app system to send a pop-up notification to potentially millions of people, claiming to have 'compromised the Snowflake instance'. Asos is still investigating the breach and will contact customers where additional information or support may be needed. The high profile nature of the hack has put a spotlight on data security in the retail sector.