PHP Vulnerability Responses by Company

ASOS.com Limited

Companies / web services
Aliases / services
ASOS / エイソス / ASOS.WORLD / ASOS.com Limited
Official website
https://www.asos.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

ASOS website/app customer communication data

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

An unauthorized notification was sent on October 6, 2026. Stolen employee credentials enabled access to third-party platforms and customer names and contacts. The company’s update says payment card data and account passwords were not accessed.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

The official FAQ says no account action is required. Never disclose passwords, security codes or payment details through unsolicited contact, and review any direct follow-up notice.

Official service URL

Source URLs

  1. October 2026 customer-data incident FAQshttps://www.asos.com/customer-care/engagement/unauthorised-asos-notificationService and operation documentation
  2. UK NCSC alert, October 6, 2026https://www.ncsc.gov.uk/news/incident-affecting-asos-customersService and operation documentation
Related official sources
  1. Operator and company informationOfficial information directoryIdentifies ASOS.com Limited and the stated service scope.
  2. October 2026 customer-data incident FAQsOfficial information directoryAn unauthorized notification was sent on October 6, 2026.
  3. UK NCSC alert, October 6, 2026Official information directoryConfirms the incident date and warns against notification links.

Comments