Asos Shares Tumble After Cyber Hack: Will Incident Hit Embattled Fashion Firm’s Recovery?

TL;DR

Prime Big Deal Days · Oct 6–7Offer from Amazon

Get smart everyday buys delivered free — and shop member deals

• Fast, free delivery on millions of items
• Access to Prime Big Deal Days deals on October 6–7
• Prime Video, Amazon Music and more included

Start your free Prime trial →Free trial for eligible customers · Cancel anytime

As an affiliate, we earn on qualifying purchases.Hide

ASOS shares fell as much as 14.5% on Tuesday after customers received an app notification saying the retailer had been hacked. ASOS said names and contact details may have been accessed, but it did not believe payment-card details or passwords were affected; its website and app were operating normally. The extent of the incident and any effect on the company’s recovery remain unclear.

ASOS shares fell as much as 14.5% on Tuesday after customers received a phone alert from the retailer’s app warning that it had been hacked, prompting concern about the potential impact on a business trying to recover from years of weak performance. The company said customer names and contact details may have been accessed, but it did not believe payment-card information or account passwords were affected.

The alert, titled “ASOS HACKED,” appeared on Tuesday morning. It included a message addressed to ASOS’s data protection and IT teams claiming that an attacker had compromised a Snowflake instance and threatening to release data. That message was a claim from the sender; ASOS has not publicly confirmed the attacker’s account of what was accessed.

ASOS said it was investigating “unauthorised activity involving third-party platforms that we use to communicate with customers.” It said it had taken immediate steps to restrict access to the notification platforms and was working with internal and external specialists and relevant authorities. The company said its website and app were operating normally, with no current disruption to its operations.

ASOS shares ended Tuesday down close to 7%, after recovering part of an earlier fall. The retailer said it was too early to quantify any potential effect on trading. It also said it has cyber-security insurance, including business-continuity cover, but gave no estimate of whether a claim or other costs would result.

A Test for ASOS’s Customer Recovery

The concern for ASOS extends beyond the immediate share-price reaction. The retailer’s recovery depends on rebuilding customer engagement and sustaining sales, making confidence in the security of its services relevant to its turnaround. Any loss of trust could complicate that effort, even if the incident does not interrupt online orders.

Dan Coatsworth, head of markets at AJ Bell, said the incident had come “at a terrible time” because it followed positive signs of a business turnaround. He warned that ASOS risked losing customer trust if people felt its systems were not secure. These are assessments of potential reputational risk; the scale of any customer response has not been established.

The immediate operational picture differs from a cyberattack that prevents customers from buying or a retailer from fulfilling orders. ASOS reported no current disruption, while the extent of possible data access remains under investigation. The distinction matters: a data incident can still carry reputational and security consequences without causing an immediate interruption to trading.

Turnaround Before the Cyber Alert

ASOS boomed during Covid-era lockdowns, but later faced weaker demand, rising costs and competition from low-priced online retailers such as Shein. It has responded by reducing excess stock, changing its approach to returns and restructuring parts of the business. Those steps have formed part of an effort to improve performance and re-engage shoppers.

The share-price figures show both a recent rebound and the longer decline: according to the report, ASOS stock was up about 81% over the 12 months before Tuesday’s fall, but down about 83% over five years. Those figures refer to different time periods and do not establish the cause of the movements. The report said ASOS had also begun to see its active customer numbers grow again.

Analysts cited in the report contrasted the incident with the attack on Marks & Spencer the previous spring. Peel Hunt analyst John Stevenson said the ASOS event appeared “very different” based on information available at the time and described it as possibly a relatively basic data breach. The M&S attack, by contrast, affected many systems and prevented online orders for weeks. That comparison is provisional, because ASOS’s investigation is ongoing.

““Our website and app are operating as normal, with no current disruption to any aspects of our operations.””

— ASOS

Scope and Customer Impact Remain Unknown

ASOS has not said how many customers may be affected, what specific records were accessed or whether any data has been published. Its statement that names and contact details may have been accessed describes a possibility, not a confirmed account of the full data involved. The threat in the app alert has also not been independently verified in the information provided.

The company said it did not believe payment details or passwords were impacted, but the investigation is ongoing. It is also too early to determine whether customers will change their use of the service, whether the incident will affect sales or whether ASOS will incur material costs. No quantified trading impact has been announced.

Investigation and Further Company Updates

ASOS said it was working with specialist advisers and relevant authorities to investigate the unauthorised activity. The company said it would provide an update if the situation changes. The next key information will be the confirmed scope of any data access and whether the retailer identifies any impact beyond the notification platforms.

Investors and customers will also be watching for evidence of operational, financial or reputational consequences. ASOS has said there is no current disruption and that it is too early to quantify any trading effect. Until the investigation produces more detail, analysts’ comparisons with other retail cyberattacks remain provisional and the effect on the recovery cannot yet be measured.

Key Questions

What happened to ASOS on Tuesday?

Customers received an app notification titled “ASOS HACKED” containing a threat from someone claiming to have compromised a system. ASOS said it was investigating unauthorised activity involving third-party platforms used to communicate with customers.

What customer information may have been accessed?

ASOS said names and contact details may have been accessed. It said it did not believe payment-card information or account passwords were affected. The investigation has not established the full scope.

Were ASOS orders or services disrupted?

ASOS said its website and app were operating normally, with no current disruption to its operations. It said it had restricted access to the notification platforms involved.

How much did ASOS shares fall?

ASOS shares fell as much as 14.5% on Tuesday and ended the day down close to 7%, after recovering part of the earlier decline.

Will the incident affect ASOS’s recovery?

That is not yet clear. Analysts cited in the report said customer trust could be affected, but one described the incident as unlikely to prevent trading based on information then available. ASOS said it was too early to quantify any effect on trading.

Source: rss