ASOS confirms data breach via social engineering, credential theft

ASOS confirmed that a cyber incident earlier this week involved unauthorized access to some personal data via social engineering and credential theft. The company is notifying affected customers. The full scope of data accessed remains unclear, but the incident highlights ongoing retail-sector cyber risk.