Was your data exposed in the
ASOS data breach?

Person checking their phone for a data breach notification

If you have an ASOS account, and ASOS notified you about the data breach, you could be eligible to seek compensation. Check your eligibility to find out if you can register your interest today.

Pocket Claim has partnered with a law firm that specialises in data breach claims. You can check if you could be eligible to claim and seek compensation. If eligible, you can register your interest to receive updates from us about the potential claim, including how to participate if the claim moves forward.

Register your interest in the ASOS data breach claim
Free eligibility check
Encrypted and HTTPS secure
No upfront costs to claim
Answer a few short questions to get started

The first step in getting compensation

Answer a few short questions to check if you can register your interest in the potential ASOS data breach claim.

THE FACTS SO FAR

What do we know about the ASOS data breach?

ASOS has confirmed a cybersecurity incident involving unauthorised access to customer data.

ASOS confirmed names, contact details and some information it described as non-personal account-related information was accessed.

ASOS may have notified affected customers on 6 October 2026 and 8 October 2026.

If ASOS has notified you, register your interest to receive updates from us about a potential compensation claim.

FREQUENTLYASKED QUESTIONS

How much compensation could I receive?
+

There is no fixed payout, and compensation is not automatic simply because your information was involved in a data breach. You would need to show that a breach of data-protection law caused you financial loss, distress, or both. You can claim for distress without having lost money.

Any amount would depend on your individual circumstances, including the information affected, the seriousness and duration of the impact, and evidence supporting your claim.

How much will it cost me to make a claim?
+

If a group action proceeds against ASOS, our independent legal partner will not charge any upfront costs to pursue your claim. Instead, your claim would be handled on a no-win, no-fee basis.

Under this arrangement, you would not pay your lawyer’s fees if your claim were unsuccessful, provided you met the responsibilities set out in your agreement. If your claim were successful, a success fee would be deducted from your compensation. Other costs or charges, including termination fees, may apply, depending on the agreement.

Full details of the success fee, any additional charges and the circumstances in which you could be required to pay would be provided before you entered into the agreement.

Has my information been accessed in the breach?
+

ASOS may contact you if your personal data was affected, so check your inbox and junk folder for messages received from hello@official.asos.com between 6 and 8 October 2026. Subject lines may include “Important information about an unauthorised ASOS notification” or “An update on the unauthorised ASOS notification”.

Receiving a general update does not necessarily confirm that your personal data was accessed. If you are unsure, contact ASOS through its official website or app. Do not rely on the sender’s email address alone to establish whether a message is genuine.

What happened in the ASOS data breach?
+

On 6 October 2026, at around 10am, some ASOS customers received an unauthorised push notification containing an external link. ASOS advised customers not to click it.

ASOS began its internal investigation and restricted access to the affected notification platforms. Its initial customer email said names and contact details might have been accessed, but it did not believe payment-card information or account passwords were affected.

On 7 October 2026, the Information Commissioner’s Office published advice following messages from apparent hackers claiming access to personal information. It advised customers to avoid suspicious links, access accounts through official websites or apps, and monitor accounts for unusual activity.

In a follow-up customer email, ASOS explained that an unauthorised party had impersonated a trusted contact to obtain an employee’s login credentials. These were used to access information on certain third-party platforms. ASOS confirmed access to names, contact details and some information it described as non-personal account-related information. It said no payment-card information or customer account passwords had been accessed.

ASOS said its investigation would continue over the coming weeks and that it would contact customers directly where additional information, support or action might be required.

What does registering my interest mean?
+

By registering your interest and agreeing to receive updates from us, you will receive information about a potential compensation claim, including whether a group action will proceed and how you can join.

Registering your interest does not commit you to making a claim.

What is a group action?
+

A group action allows people affected by the same data breach to pursue compensation together. Their solicitors coordinate the claims and address shared questions, such as whether the organisation failed to protect customers’ information. This can reduce duplication and allow legal costs and evidence to be shared.

Joining does not guarantee compensation or mean everyone will receive the same amount. Each person may still need to provide evidence of how the breach affected them, including any financial loss or distress.

The procedure depends on where the claim is brought. In England and Wales, claims may be managed under a formal Group Litigation Order, although not every group claim uses this route.