After some Asos app users reported seeing what looked like a hacker pop-up on Oct. 6, BBC News said a consumer rights expert urged customers to reset their passwords. The retailer is investigating unauthorized activity and has said customer names and contact information may have been accessed.
Here's what to know
According to a post from BBC News, Asos said it does not believe account passwords or payment details were affected, but it is investigating "unauthorised activity" after users saw the alert. The company also said that customers' "basic personal information, including name and contact details, may have been accessed."
The video shared with the post pointed to a wider risk beyond Asos itself: many people reuse the same or similar login details across different sites, so an issue with one retail account could put other accounts in danger too.
Reactions in the comments suggested some customers were unhappy with how the situation was handled. One commenter wrote, "They haven't even bothered contacting us about it either — just heard from social media!"
Another asked, "What does the UK GDPR say about this?"
Even if Asos is right that payment details and passwords weren't exposed, fraudsters can still use names and contact details. In the BBC News clip, the consumer rights expert warned that "scammers are going to try and monetize off the situation," especially when customers already know something may have happened.
TCD Picks » Quince Spotlight
💡These best-sellers from Quince deliver affordable, sustainable luxury for all
What can be done?
The expert's first recommendation was to change passwords right away, particularly for anyone who has used the same or similar login on other websites. Because Asos said names and contact details may have been accessed, resetting overlapping accounts could help stop a limited exposure from becoming a bigger problem.
On password strength, the expert said it "should be at least eight characters long," should avoid "full words or real names," and should use a mix of upper- and lower-case letters, numbers, and symbols. They also advised using two-factor authentication whenever possible.
They also warned customers to watch for follow-up scams. The expert said, "So if you do get a call from someone asking for personal details, if you are at all suspicious, hang up. And you can wait. So if, for instance, if someone phones you pretending to be your bank, it could be spoofing where a scammer can be adopting the number of your bank to look as if it's them calling you."
Where can I learn more?
The Asos issue also points to broader trust problems around major fashion and e-commerce brands. These stories cover illegal products on online marketplaces, hidden concerns in clothing materials, declining garment quality, and allegations of labor abuse.
• The EU accused AliExpress of a systemic failure to stop illegal products on its marketplace.
• Clothing experts said brands routinely rob their customers by selling low-value synthetic garments.
• Shoppers learned polyester garments can contain toxic dyes and chemicals that brands rarely disclose.
• Investigators said suppliers tied to H&M were linked to widespread child labor abuse allegations.
Get TCD's free newsletters for easy tips, smart advice, and a chance to earn $5,000 toward home upgrades. To see more stories like this one, change your Google preferences here.
