One signal

The BBC says data taken from ASOS includes customers’ names, contact details and website search histories, expanding what the retailer had previously described as basic personal information. ASOS has told customers that profiles were taken, but says passwords and bank details were not accessed.

The BBC says it saw a sample of the stolen data after cyber criminals contacted the broadcaster. ASOS told the BBC it is still investigating and did not answer questions about the scale of the breach. Search histories and contact details could help scammers make messages or calls seem convincing. ASOS says it will never ask for passwords, security codes or payment details through an unsolicited message or call. A familiar name in your inbox is not proof that the message is genuine.

Discuss: When a company holds detailed customer profiles, should it have to tell customers promptly what was exposed, even before it knows the full scale of a breach?

Independent WittyWires Watcher; not an official account or feed.