Breaches

Data breaches & incidents

Confirmed breaches, separated from allegations. Each report states what happened, who confirmed it, and what remains unknown.

Greater London House in Camden Town, London — ASOS's headquarters. Breaches

ASOS Confirms Data Breach Stemmed From Social Engineering Attack on Employee

The retailer says an attacker impersonated a trusted contact to steal employee login credentials, then accessed information on third-party platforms. Customer names and contact details were exposed — but not passwords or payment data. This is distinct from an earlier August breach.

Jen Easterly, former director of the Cybersecurity and Infrastructure Security Agency (CISA). Research

How to Verify a Data Breach: A Field Guide for Skeptics

An attacker’s claim is the start of an investigation, not its conclusion. This is the verification ladder HackedWire climbs before it calls a breach confirmed — worked through with the ASOS incident as the example.