← The Hacker in a Hoodie Index · On the Government Record

ASOS US Sales LLC

Jul 2026 · Graded Verified · Retail and Consumer · Government record

ASOS US Sales LLCJul 2026

ASOS traced unauthorized account access to credentials stolen in a different company's breach and reused against it. Nothing in ASOS's systems was breached; a valid credential was just presented by the adversary. Password-only authentication inherits every leak that credential ever appeared in, and the system just works as designed after it is leveraged.

California AG breach notification

Not yet quantified

VVerifiedRetail and Consumer

About this record

This incident is on the public government record: an SEC 8-K filing or a state-regulator notification, graded Verified. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.

← The complete On the Government Record ledger ← Back to the index