Was your data exposed in theASOS data breach?

If you have an ASOS account, and ASOS notified you about the data breach, you could be eligible to seek compensation. Check your eligibility to find out if you can register your interest today.
Pocket Claim has partnered with a law firm that specialises in data breach claims. You can check if you could be eligible to claim and seek compensation. If eligible, you can register your interest to receive updates from us about the potential claim, including how to participate if the claim moves forward.
The first step in getting compensation
Answer a few short questions to check if you can register your interest in the potential ASOS data breach claim.
THE FACTS SO FAR
What do we know about the ASOS data breach?
ASOS has confirmed a cybersecurity incident involving unauthorised access to customer data.
ASOS confirmed names, contact details and some information it described as non-personal account-related information was accessed.
ASOS may have notified affected customers on 6 October 2026 and 8 October 2026.
If ASOS has notified you, register your interest to receive updates from us about a potential compensation claim.
FREQUENTLYASKED QUESTIONS
There is no fixed payout, and compensation is not automatic simply because your information was involved in a data breach. You would need to show that a breach of data-protection law caused you financial loss, distress, or both. You can claim for distress without having lost money.
Any amount would depend on your individual circumstances, including the information affected, the seriousness and duration of the impact, and evidence supporting your claim.
If a group action proceeds against ASOS, our independent legal partner will not charge any upfront costs to pursue your claim. Instead, your claim would be handled on a no-win, no-fee basis.
Under this arrangement, you would not pay your lawyer’s fees if your claim were unsuccessful, provided you met the responsibilities set out in your agreement. If your claim were successful, a success fee would be deducted from your compensation. Other costs or charges, including termination fees, may apply, depending on the agreement.
Full details of the success fee, any additional charges and the circumstances in which you could be required to pay would be provided before you entered into the agreement.
ASOS may contact you if your personal data was affected, so check your inbox and junk folder for messages received from hello@official.asos.com between 6 and 8 October 2026. Subject lines may include “Important information about an unauthorised ASOS notification” or “An update on the unauthorised ASOS notification”.
Receiving a general update does not necessarily confirm that your personal data was accessed. If you are unsure, contact ASOS through its official website or app. Do not rely on the sender’s email address alone to establish whether a message is genuine.
On 6 October 2026, at around 10am, some ASOS customers received an unauthorised push notification containing an external link. ASOS advised customers not to click it.
ASOS began its internal investigation and restricted access to the affected notification platforms. Its initial customer email said names and contact details might have been accessed, but it did not believe payment-card information or account passwords were affected.
On 7 October 2026, the Information Commissioner’s Office published advice following messages from apparent hackers claiming access to personal information. It advised customers to avoid suspicious links, access accounts through official websites or apps, and monitor accounts for unusual activity.
In a follow-up customer email, ASOS explained that an unauthorised party had impersonated a trusted contact to obtain an employee’s login credentials. These were used to access information on certain third-party platforms. ASOS confirmed access to names, contact details and some information it described as non-personal account-related information. It said no payment-card information or customer account passwords had been accessed.
ASOS said its investigation would continue over the coming weeks and that it would contact customers directly where additional information, support or action might be required.
By registering your interest and agreeing to receive updates from us, you will receive information about a potential compensation claim, including whether a group action will proceed and how you can join.
Registering your interest does not commit you to making a claim.
A group action allows people affected by the same data breach to pursue compensation together. Their solicitors coordinate the claims and address shared questions, such as whether the organisation failed to protect customers’ information. This can reduce duplication and allow legal costs and evidence to be shared.
Joining does not guarantee compensation or mean everyone will receive the same amount. Each person may still need to provide evidence of how the breach affected them, including any financial loss or distress.
The procedure depends on where the claim is brought. In England and Wales, claims may be managed under a formal Group Litigation Order, although not every group claim uses this route.

