Asos traces a breach to stolen credentials

Asos says an employee disclosed a work login after an outsider impersonated a trusted contact.

Reported scope

The company says names and contact details were affected, but payment-card information and account passwords were not.

Investigation

Asos says affected platforms are locked down. The UK privacy regulator is assessing the breach; these are attributed statements.