credential theft

ASOS Breach Via Employee Credential Theft Exposes Customer Contact Data

The UK fashion retailer says an attacker impersonated a trusted contact to steal an employee's login, then used it to reach third-party platforms holding customer data, though ASOS has not specified how many of its roughly 16.5 to 17 million active customers were affected.