Do not click the link in the unauthorized ASOS push notification. Open ASOS through its official app or by typing its website address, watch for follow-up scams, and secure the email account linked to your ASOS account. ASOS says names and contact details may have been accessed, but it does not currently believe account passwords or payment-card information were affected. The investigation is ongoing, and ASOS is not currently asking customers to change their ASOS password.
What happened, and what information may be involved?
ASOS said an unauthorized push notification was sent to some customers on 6 October 2026. The company is investigating unauthorized activity involving third-party platforms it uses to communicate with customers, and says it has restricted access to those platforms. ASOS’s incident notice says basic personal information, including names and contact details, may have been accessed. The UK National Cyber Security Centre (NCSC) repeated that account of the possible exposure in its alert published on 6 October 2026.
As an Amazon Associate I earn from qualifying purchases.
ASOS says it does not currently believe payment-card information or account passwords were impacted. Those are the company’s statements while the investigation is underway, not a final independent determination. The official incident materials do not provide a confirmed number of affected customers or records, or a quantified financial impact.
The NCSC advises ASOS customers to assume they are affected even if they did not receive the push notification. ASOS says its website and app remain available, customers may continue shopping, and it will contact affected customers directly if its guidance changes. ASOS Customer Care incident notice | NCSC incident alert
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
What should I do first?
- Ignore the notification’s external link. ASOS says not to click or engage with the third-party link in the unauthorized notification. Do not reply to it or provide information through it.
- Reach ASOS independently. Open the official app or type the ASOS website address yourself. If you need help, use ASOS Customer Care from the official site. ASOS says it contacts customers through an ASOS-branded email address or a verified social media account; if a message leaves you unsure, verify it through Customer Care rather than using its links.
- Be cautious with messages about the incident. A scammer may use the breach as a pretext for a password reset, compensation offer, account verification request, delivery problem, or urgent fraud warning. Do not share passwords, card details, or other sensitive information in response to an unsolicited message, and avoid opening unexpected attachments. Navigate to the organization’s official site or app yourself.
The NCSC warns that suspicious messages can arrive some time after a breach becomes public and may imitate the affected organization. Its general advice is to avoid suspicious links in notifications, emails, and messages. NCSC incident alert | NCSC phishing guidance
Secure the email account connected to ASOS
Your email account matters because it can be used to reset passwords for other services. ASOS and the NCSC advise using a strong, unique email password—not one shared with ASOS or any other account—and enabling stronger sign-in protection where available. The NCSC recommends passkeys, or strong separate passwords together with two-step verification.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
- Review recent sign-ins and account activity for anything you do not recognize.
- Check that your recovery email address and phone number are yours and up to date.
- Use your email provider’s official security settings to enable available two-step verification or passkey options. The exact controls and recovery process depend on the provider.
These are general account-protection steps, not a claim that ASOS passwords or email accounts were accessed in this incident. NCSC incident alert | NCSC advice on staying secure online
Should I change my ASOS password?
For this incident, ASOS says it is not currently asking customers to change their ASOS account password or take any other action, and does not believe account passwords were impacted. It would be inaccurate to describe a forced ASOS password reset as the company’s current instruction.
Rank #3
- Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T110. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
- Certified with the new FIDO2 standard, T110 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
- Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
- Fits USB-A port : Insert the T110 security key into the USB-A port of each service and log in conveniently with one touch
- For the driver download and user guide, please visit TrustKey Solutions Home support page.
Change a password promptly if you reused it on another service and it is exposed, vulnerable, or otherwise suspected of compromise. Update it on every service where it was reused, and give each account its own password. If you choose to change your ASOS password, sign in through the official app or website and use the account controls. If you cannot remember it, use the official “Forgot password?” flow; ASOS says it sends a reset link to the email address registered to the account. ASOS Customer Care | NCSC guidance on passwords and suspicious messages
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Check your ASOS account and payment activity
Review your account for orders, messages, sign-ins, or changes you do not recognize. Pay particular attention to changes to your email address, delivery address, payment methods, password, or contact preferences. ASOS’s account help pages provide controls for these details; save any changes you make. If you cannot access the account, use the official password recovery process or contact Customer Care through the official Help pages. ASOS Customer Care and account help
Rank #4
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
ASOS says it does not currently believe payment-card details were affected. Even so, its security guidance advises checking bank statements and reporting unrecognized transactions to your payment provider. For a suspected unauthorized ASOS transaction, contact ASOS through its Help pages and provide the transaction date, time, amount and currency, plus the last four digits of the card. ASOS says not to send a full card number or bank-account screenshots through email or live chat. ASOS Customer Care
What if I see unfamiliar activity or lose money?
If you find suspicious activity, use the service’s official recovery process and contact its support team through a channel you verified independently. The NCSC identifies unfamiliar account changes, messages sent from your account, sign-ins at unusual times, and being unable to log in as warning signs.
If you are in the UK and have lost money, contact your bank and report the crime using the UK reporting channels described by the NCSC. Its guidance says people in Scotland should contact Police Scotland on 101. These reporting steps are UK-specific. NCSC guidance on phishing and reporting
How to keep up with changing guidance
This is an active investigation. ASOS says it will contact affected customers directly if its advice changes. Check the incident notice by reaching ASOS through its official website or app rather than relying on links in messages. Keep the distinction clear: ASOS’s current position is that it does not believe passwords or payment-card information were impacted and is not asking customers to change their ASOS password; the NCSC advises all ASOS customers to assume they may be affected and remain alert to suspicious contact.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minute
