No Asos report of potential breach after app notification, UK ICO says (update*)
By Patricia Figueiredo ( October 6, 2026, 13:56 GMT | Insight) -- Fashion retailer Asos hasn’t reported any potential data breaches to the UK privacy regulator, despite users receiving an app notification this morning apparently sent by hackers. The Information Commission’s Office said it hasn’t received a report at this stage, but stressed that not all breaches need to be reported. Organizations must notify it within 72 hours of becoming aware of a personal data breach, unless such a breach poses no risk to people’s rights and freedoms, the ICO said.The UK data protection regulator hasn’t been notified of any potential breaches by online fashion retailer Asos, despite thousands of users receiving on Tuesday morning a notification on the Asos app that appears linked to a cyberattack. Asos said in a statement that names and contact details may have been accessed through “unauthorized activity involving third-party platforms.”...
Prepare for tomorrow’s regulatory change, today
MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.
Know what others in the room don’t, with features including:
- Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
- Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
- Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
- Curated case files bringing together news, analysis and source documents in a single timeline
Experience MLex today with a 14-day free trial.