Malwarebytes Labs Reports ASOS Hackers Stole Customer Details and Shopping Searches
Researchers confirm the ASOS data breach includes shopping search history alongside personal details, raising phishing risks for customers.
Key points
- Malwarebytes Labs confirmed stolen ASOS data includes shopping searches and personal details.
- The inclusion of search history allows attackers to craft highly convincing phishing messages.
- Customers are advised to monitor for targeted phishing attempts based on their shopping behavior.
Malwarebytes Labs published first-hand research on October 2026 confirming that hackers stole customer personal details and shopping searches from ASOS. The update provides specific clarity on the scope of the data exfiltration, revealing that the breach extends beyond standard contact information to include behavioral data about user interests and browsing habits within the retailer's platform.
The stolen dataset contains a combination of personal identifiers and specific shopping search queries made by ASOS customers. This granular level of data allows threat actors to understand individual preferences and recent purchase intentions. The presence of shopping searches in the stolen data significantly increases the potential for social engineering attacks, as attackers can tailor messages to appear legitimate and relevant to the victim's recent activity.
Context and Background
According to Malwarebytes Labs, the primary risk associated with this specific data combination is the creation of convincing phishing messages. Attackers can use the stolen shopping searches to reference specific products or brands the victim recently viewed. This context makes fraudulent emails or messages appear as if they originate from ASOS or a related service, thereby increasing the likelihood that a recipient will click a malicious link or provide further credentials.
The publication of this update serves to clarify the nature of the compromised information for security professionals and affected users. By identifying shopping searches as part of the exfiltrated data, Malwarebytes Labs highlights the evolution of data theft tactics. Thieves are no longer satisfied with basic contact lists; they seek behavioral data that enables high-fidelity impersonation and targeted fraud campaigns against retail customers.
Who Is Affected
ASOS customers whose accounts were accessed during the breach are the primary subjects of this data theft. These individuals have had their personal details and specific shopping search histories exposed to unauthorized parties. The exposure means that any user who logged into ASOS and performed product searches during the vulnerable period may have their browsing history included in the stolen dataset.
The impact extends to anyone relying on the assumption that only name and address data were compromised. The inclusion of search history changes the threat landscape for these users. They are now at higher risk for targeted phishing attempts that reference specific items or categories they searched for. This personalization makes the phishing attempts more difficult to detect than generic spam or broad phishing blasts.
What should you do?
Security professionals and affected users should monitor their inboxes for phishing messages that reference specific products or brands. The stolen shopping searches provide attackers with the context needed to create highly personalized lures. Users should verify the sender address and look for subtle inconsistencies in URLs or branding, even if the content seems relevant to recent activity.
Organizations should review their incident response procedures for data breaches involving behavioral data. The combination of personal details and search history requires a different communication strategy than breaches involving only static data. Alerts to customers must explicitly warn about the potential for personalized phishing, not just generic identity theft.
Background: Social engineering
Look for urgency, secrecy, and deviation from standard channels. Verify identity through a separate, known communication path before acting. Isolate suspicious interactions immediately to prevent lateral movement within your network environment.
Read the full guide: Social Engineering Warning Signs and How to Respond
What to do and how to stay safe: ASOS
- Monitor email and messaging accounts for phishing attempts that reference specific products or brands you recently searched for on ASOS.
- Verify the legitimacy of any communication claiming to be from ASOS by checking the sender's email address and avoiding clicking links directly.
- Enable multi-factor authentication on your ASOS account and other sensitive online accounts to add an extra layer of security.
- Report any suspicious messages or potential phishing attempts to ASOS support and relevant cybersecurity authorities.
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What specific data was stolen in the ASOS breach?
Hackers stole customer personal details and shopping searches, according to Malwarebytes Labs research published in October 2026.
Why are shopping searches dangerous if stolen?
Shopping searches allow attackers to create convincing phishing messages that reference specific products, making the fraud appear more legitimate.
When was this update published?
Malwarebytes Labs published this first-hand research update in October 2026.
