ASOS links data breach to social engineering attack and stolen credentials

ASOS confirmed that a recent data breach was caused by a social engineering attack. The attacker impersonated a trusted contact, obtained an ASOS employee’s login credentials, and used them to access information on third-party platforms used by the company.