ASOS US Sales LLC Reports 2026 Data Breach Exposing Customer Data

ASOS US Sales LLC, an online fashion retailer, confirmed a data security incident to the Oregon Attorney General. The company filed its breach notification on September 9, 2026, detailing an event that took place on July 28, 2026. The specific nature of the breach was not disclosed in the public filing, but it led to unauthorized access to customer records.

The exposed data categories identified in the report include Full Name, Email Address, Mailing Address, Password or Credential Hash, Purchase and Order History, Payment Card Information, Phone Number, and Customer Account Preferences. This comprehensive exposure presents multiple risks for individuals whose data was compromised.

Exposure of this type of personal and financial information can lead to various forms of fraud. Cybercriminals may use compromised details for targeted phishing attempts, unauthorized purchases, or to gain access to other online accounts. Individuals should be particularly vigilant for unusual account activity or suspicious communications.

To mitigate potential risks, affected individuals should promptly review all financial statements and credit reports for unauthorized transactions. It is also advisable to change passwords for any ASOS account and consider doing so for other online services where similar credentials might have been used. Placing a fraud alert or freezing credit with major credit bureaus can provide an additional layer of protection against identity theft. The investigation status for this incident is currently listed as monitoring.