ASOS Confirms Social Engineering Breach

UK fashion retailer ASOS confirmed a data breach on October 6, 2026, caused by a social engineering attack where hackers stole an employee's login credentials. The threat actor, Xuanye Group, accessed third-party platforms but did not steal payment information or passwords. Exposed details include full names and contact details, while the company's website and app remain safe to use.