GoKawiilASOS breach traced to single stolen employee login, hackers accessed app notification system
A group calling itself Xuanye Group said it breached ASOS after impersonating a trusted contact to obtain one employee's login credentials, then used that access to reach multiple internal systems, including the platform used to send push notifications to ASOS's mobile app users. ASOS has around 17 million customers and 2,800 employees; the company says this incident is separate from a July breach at ASOS US that affected nearly 140,000 people via credential stuffing.