CSAIS
CriticalEarly warningData leakUnited kingdom · English

ASOS confirms cyber attack as customer data may have been accessed

First seen 6 Oct, 16:52 WIBLatest 14 Oct104 articles · 84 publishers · 11 syndicated
victim: asosactor: scattered spiderVerify evidence
85
Confidence index · preliminarycomputed by the pipeline (V0.7)high
Corroborated by distinct domains
Independent sources
Victim identified
Full text available
Clustering consistency
Status and preventive steps
Early warningMachine output from news coverage; not verified by the public or institutions
Preventive steps
  • Turn on two-step verification for email, banking, and social media.
  • Change passwords on affected accounts and turn on two-step verification.
  • Be wary of messages quoting your personal data; leaks are often followed by convincing scams.
Literacy audienceRetail investors and crypto usersTelegram users in IndonesiaSocial media and messaging users
Literacy topics
  1. Preventing takeover of social media and messaging accounts
  2. Turning on two-step verification
  3. Protecting personal data, OTPs, and PINs

Report toPatroli Siber Polri

Extracted claims

Victimconfidence 0.90
ASOS2 differing values across articles; review needed.
Actorconfidence 0.60
Scattered Spider
Attack typeconfidence 0.90
Data leak22 differing values across articles; review needed.
Event datenot found
not identified
LocationUnited kingdom
Target groupIndividuals
Status
  • D1 Machinehigh trust
Conclusion
  • D1 MachineHappened

Source chronology

104 articles, by publication time

6 October 202633 articles

Show all 104 articlesCollapse

6 October 2026 · continued33 articles

  1. 18:16 WIB+1 hfull text hashed
    ASOS hacked: App sends data leak threat to customersjfeed.comASOS
  2. 21:15 WIB+4 hfull text hashed
    REG - ASOS PLC - Update regarding cyber incidenttradingview.com
  3. 21:18 WIB+4 hfull text hashed
    ASOS Data Breach: "Hacked" Alert Sparks 400+ Reportsshattered.io
  4. 22:24 WIB+6 hfull text hashed
    Asos Shares Slide 11% as Cyber Incident Reaches Customersasktraders.com
  5. 22:31 WIB+6 h
    ASOS confirms cyber attackretailgazette.co.ukASOS
  6. 23:33 WIB+7 hfull text hashed
    ASOS confirms data breach after “HACKED” in-app notificationsbleepingcomputer.comASOS

7 October 202637 articles

  1. 01:18 WIB+8 hfull text hashed
    ASOS Says Cyberattack May Have Compromised Customer Datainsurancejournal.com
  2. 02:42 WIB+10 h
    ASOS shoppers hit by alarming cyber breach alerttheaustralian.com.au
  3. 04:03 WIB+11 h
    ASOS Shares Drop 10% After Cyber Attack Targets Retailerglobalbankingandfinance.com
  4. 05:52 WIB+13 hfull text hashed
    ASOS customers receive ‘hacked’ app alert threatening data leakcyberinsider.com
  5. 12:29 WIB+20 hSyndicatedfull text hashed
    ASOS Hacked as Attackers Abuse Customer Notification Platform to Threaten Data Leakgbhackers.comASOS
  6. 12:45 WIB+20 hfull text hashed
    Data Konsumen Asos Diduga Bocor, Pelaku Diduga Xuanye Groupbloombergtechnoz.comAsos
  7. 15:22 WIB+23 h
    Online retailer ASOS warns customers of data breachretail-insight-network.com
  8. 15:57 WIB+23 h
    ASOS share price drops after cyber attackBusinessCloud
  9. 16:29 WIB+24 hfull text hashed
    ASOS confirms data breach after "hacked" app alert reaches shoppershelpnetsecurity.comASOS
  10. 16:46 WIB+24 hfull text hashed
    ASOS Confirms Cyberattack, Data Breachsecurityweek.comASOS
  11. 17:24 WIB+25 hfull text hashed
    What Asos customers should do after retailer hit by cyber attackindependent.co.ukAsos
  12. 17:24 WIB+25 hSyndicatedfull text hashed
    What Asos customers should do after retailer hit by cyber attacknewswav.comAsos
  13. 17:43 WIB+25 h
    Asos shares sink on cyberattackJust Style
  14. 20:51 WIB+28 hSyndicated
    UK fashion giant Asos shares tumble after reported cyberattackthemercury.co.za
  15. 21:03 WIB+28 h
    Asos confirms cyber attack: What to knowFashion UnitedAsos

8 October 202617 articles

  1. 15:24 WIB+47 hfull text hashed
    What Do We Know About The Cyber Incident At ASOS (LSE:ASC)?kalkinemedia.com
  2. 18:42 WIB+50 hfull text hashed
    ASOS links data breach to social engineering attack, credential theftbleepingcomputer.comASOS
  3. 21:21 WIB+52 hfull text hashed
    ASOS: Social Engineering Attack Behind Data Leaksecnews.gr

9 October 20265 articles

  1. 06:48 WIB+62 hfull text hashed
    ASOS Data Breach Confirmed: Names Leaked, 0 Passwords Hitshattered.io

12 October 20264 articles

  1. 14:45 WIB+142 hfull text hashed
    ASOS cyber incident: industry reactsretailgazette.co.ukASOS

13 October 20266 articles

  1. 04:00 WIB+155 hfull text hashed
    Cyber attack scare for H&M: Fashion giant probes claims it was targeted by same group that hacked JLRthisismoney.co.ukAsosScattered Spider
  2. 21:57 WIB+173 hSyndicated
    How can I protect my data after Hobbs and ASOS cyber attacks?Yahoo News New Zealand

14 October 20262 articles

  1. 02:27 WIB+178 h
    ASOS Cyber AttackBrown & Brown
Relations between articles
5,179 pairs likely independent62 pairs uncertain5 pairs likely reproduced5 pairs likely duplicate2 pairs possibly reproduced

Evidence

Hashes prepared103full text hashed 33
first evidence_uid98414940ff02fb2b89a45651
103 of 103 evidence records are in Merkle batches

Flow comparison D1–D4

each flow's preventive output; this is where they differ · D1 changed 8 times · since 7 Oct
D1Machine16 OctD2Public surveynone yetHelp reviewD3Institutionnone yetD4Official recordnone yet
Summary (AI)

Peretas mengancam membocorkan data pelanggan platform belanja ASOS dan mengirim notifikasi ancaman langsung ke pengguna. Modus pemerasan via notifikasi akun ini relevan bagi konsumen Indonesia yang berbelanja di platform daring global.

–––
Literacy audience (AI)
  • Konsumen belanja online pengguna aplikasi AndroidDI Yogyakarta
  • Investor ritel pengguna grup Telegram
–––
Topics (AI)
  1. Waspada modus pemerasan berbasis notifikasi aplikasi (push notification extortion)
  2. Mitigasi risiko kebocoran data pribadi dari platform e-commerce global
  3. Cara mengenali pesan ancaman dan manipulasi rekayasa sosial
–––
Steps (AI)
  • Jangan panik atau menuruti instruksi transfer uang saat menerima push notification atau pesan bernada ancaman
  • Ganti kata sandi akun e-commerce global secara berkala dan aktifkan autentikasi dua faktor (2FA)
  • Hapus tautan kartu kredit atau gunakan kartu debit virtual dengan limit saldo terbatas untuk transaksi luar negeri
  • Laporkan pesan pemerasan atau notifikasi mencurigakan ke pihak berwenang
–––
Key message (AI)

“Abaikan notifikasi ancaman, amankan akun, dan jangan pernah kirim uang.”

–––
Institution's reason––––
Catalog-based advice (no AI)
Literacy audienceRetail investors and crypto usersTelegram users in IndonesiaSocial media and messaging users–––
Literacy topics
  1. 1.Preventing takeover of social media and messaging accounts
  2. 2.Turning on two-step verification
  3. 3.Protecting personal data, OTPs, and PINs
–––
Preventive steps
  • Turn on two-step verification for email, banking, and social media.
  • Change passwords on affected accounts and turn on two-step verification.
  • Be wary of messages quoting your personal data; leaks are often followed by convincing scams.
Report to Patroli Siber Polri
–––

✦ AI advice Written by an AI model (gemini-3.8-flash) from each flow's inputs; it can be wrong, so review it before using it as official advice.Columns D2 to D4 fill in once the public survey and institution statements are running.Summary across incidents