ASOS Data Breach Claims Scotland
If you live in Scotland and ASOS has contacted you to say that your personal information may have been affected by its recent cyber incident, Thompsons Solicitors Scotland can help you understand whether you may be able to make a data breach compensation claim.
ASOS has confirmed that an unauthorised party gained access to customer information after obtaining an employee’s login credentials. The credentials were then used to access information held on certain third-party platforms used by ASOS.
The incident first came to wider attention after ASOS customers received an unauthorised push notification through the ASOS app on 6 October 2026. The National Cyber Security Centre has since advised ASOS customers to remain alert for suspicious messages following the incident.
If you have received an email or notification from ASOS telling you that your personal information was affected, our specialist data breach solicitors can review what has happened and explain your options.
Find out if you may have an ASOS data breach claim, click the link below.
What happened in the ASOS data breach?
ASOS says the incident began when an unauthorised party impersonated a trusted contact and obtained login credentials belonging to an ASOS employee.
Those credentials were then used to access customer information held on third-party platforms used by the company. ASOS says it secured the affected platforms and began investigating the incident with cyber security specialists, law enforcement and regulatory authorities.
ASOS has said that its website and app remained safe to use during the incident.
What personal information was affected?
ASOS has confirmed that customer information accessed during the incident included names and contact details, together with certain other account-related information.
The exact information affected may vary from customer to customer.
ASOS has said that payment card information and account passwords were not accessed as part of the breach.
If ASOS has contacted you about the incident, keep a copy of the email or notification you received. This may help establish what information relating to you was involved.
How do I know if I was affected by the ASOS data breach?
ASOS has been contacting customers about the incident, so receiving an email or notification from the company is an important indication that your information may have been involved.
The National Cyber Security Centre has advised ASOS customers to assume they may be affected for cyber-security purposes and to remain vigilant for suspicious communications, even if they did not receive the original unauthorised push notification.
If you live in Scotland and have received correspondence from ASOS about the breach, Thompsons can review it and advise whether your circumstances may give rise to a compensation claim.
Can I claim compensation for the ASOS data breach?
You may be able to make a compensation claim if your personal information was affected and you suffered damage as a result.
Under data protection law, compensation is not necessarily limited to financial loss. The Information Commissioner’s Office explains that compensation may potentially be available for material damage, such as money lost, and non-material damage, including distress.
The impact of a data breach can differ significantly from person to person. You may be concerned about:
- who has accessed your personal information;
- how your contact details could be used;
- phishing emails or fraudulent text messages;
- scam calls pretending to be from ASOS or another organisation;
- misuse of your personal details;
- loss of control over your information; or
- distress or anxiety caused by the breach.
Being affected by the incident does not automatically mean that compensation will be payable. The strength of any claim will depend on your individual circumstances, including the information affected and the impact the breach has had on you.
Our specialist solicitors can assess this for you.
What should I do if ASOS has contacted me about the data breach?
If you have received an email or notification from ASOS, keep a copy.
You should also:
- keep any further correspondence relating to the incident;
- be cautious about unexpected emails, calls and text messages;
- avoid clicking suspicious links or opening unexpected attachments;
- never provide passwords, security codes or payment information in response to unexpected contact;
- keep evidence of suspicious or fraudulent communications;
- review your accounts for activity you do not recognise; and
- keep a note of any financial loss, distress or other problems you experience.
The National Cyber Security Centre has warned that suspicious messages can arrive some time after a data breach and advises customers not to click suspicious links received through push notifications, email or other messages.
Specialist ASOS data breach solicitors in Scotland
Thompsons Solicitors Scotland has extensive experience representing people whose personal information has been compromised following major data breaches.
Our specialist Data Breach team has represented claimants affected by significant incidents involving organisations including Arnold Clark, easyJet, JD Sports and Capita.
If you live in Scotland and ASOS has told you that your personal information was affected, our team can:
- review the email or notification you received;
- help establish what information may have been affected;
- explain your rights;
- assess the impact the breach has had on you;
- advise whether you may have a compensation claim; and
- guide you through the claims process if you decide to proceed.
All enquiries are handled sensitively and confidentially.
No Win No Fee ASOS data breach claims
Thompsons acts in data breach compensation claims on a No Win No Fee basis.
This means that if your claim is unsuccessful, you will not be charged our fees, provided you comply with the terms of the agreement.
If your claim is successful, a percentage will be deducted from the compensation secured.
We will explain the terms clearly before you decide whether you want to proceed.
Received an ASOS data breach email?
If you live in Scotland and ASOS has contacted you to say that your personal information may have been affected, speak to Thompsons Solicitors Scotland.
Complete on online form, upload a copy of the email or notification if you still have it and our specialist Data Breach team can assess your circumstances and advise whether you may have a claim.
Talk To Thompsons today.
ASOS Data Breach FAQs
No. Receiving confirmation that your information was affected does not automatically mean that compensation will be payable.
Whether you have a claim will depend on your individual circumstances, including the information involved and the impact the breach has had on you.
Not necessarily.
Data protection law allows compensation to be sought for material damage, such as financial loss, and non-material damage, such as distress, where the relevant legal requirements are met.
The best starting point is the email or notification you received from ASOS about the breach.
You should also keep any follow-up correspondence and evidence of suspicious messages, fraud, financial loss or other problems you believe may be connected with the incident.
Yes. Thompsons acts in data breach compensation claims on a No Win No Fee basis.
We will explain the terms, including any deduction that may apply if your claim succeeds, before you decide whether to proceed.
Our Fees
We act for you on a no win, no fee basis. This means that, provided you meet your obligations and do not withdraw your instructions before your claim is concluded without our agreement, you will not be charged any fees, VAT, or outlays if your case is unsuccessful.
If Your Claim Is Successful
- Our fee will be deducted as a percentage of the compensation secured.
- This fee includes the cost of any After the Event (ATE) insurance arranged to protect you from liability for the other side’s costs if your claim is unsuccessful.
If You End Your Agreement Early
- If you withdraw your instructions or later continue your claim with another firm, you may be liable for the reasonable cost of the work completed and any outlays incurred up to that point.
- Other Circumstances Where You May Be Liable for Costs
- If you act fraudulently or provide misleading information.
- If you refuse our advice to settle after a formal offer is made.
Full Terms
Full details are set out in our Terms of Business, which will be sent to you when your claim is accepted. Making an initial enquiry does not place you under any obligation.