Online fashion retailer ASOS said on Thursday that some of its users’ personal information had been compromised in a cybersecurity breach.
The hack exposed some customers’ personal information, including names and contact details, according to a preliminary investigation launched by the U.K. based online retailer.
It said in an email to customers seen by Global News that an unauthorized party gained access to an ASOS employee’s account by impersonating a trusted contact to obtain login credentials that were used to access information on certain third-party platform used by ASOS.
The compromised platforms were immediately locked down, and a full-scale investigation was launched, the email continued.
Get daily National news
The hacker gained access to “certain non-personal account-related information,” but no payment card information or account passwords, the email said, adding that the retailer’s website remains safe to use.
Once the investigation is complete, the company said it will contact customers directly where they believe it believes additional information, support or action may be required.
ASOS ships its products all over the world, including to Canada and the United States.
So-called “social engineering” operations, where hackers impersonate workers to gain access to companies’ computer networks, are prevalent.
British companies and institutions have been increasingly hit by aggressive and regular cyber and ransomware attacks in recent years.
The British Library, a blood testing service, the London Underground, grocery chains Marks & Spencer, the Co-op and car manufacturer Jaguar Land Rover are some that have suffered months of disruption due to such breaches.
–with files from Reuters and Global News’ Uday Rana
Comments
Want to discuss? Please read our Commenting Policy first.