WASHINGTON, D.C. — ASOS, the UK‑based online fashion retailer, confirmed on Tuesday that an unauthorised customer notification was pushed to its mobile app, prompting concerns among shoppers and investors about data security and operational controls.

The message, which appeared as a pop‑up on the app at 14:32 GMT, advised users to “verify your account” and included a link that security experts later identified as a phishing URL. Within minutes, users reported the alert on social media, and the company’s help desk logged more than 12,000 inquiries in the first two hours.

“We have engaged a specialist cyber‑security firm and are cooperating with law‑enforcement agencies to investigate the source of the breach,” said Emily Clarke, ASOS spokesperson, in a statement released Thursday. Financial analyst Mark Liu of Global Equity noted, “This incident underscores the need for stronger cyber‑risk governance across all e‑commerce platforms, especially those with a global customer base.”

ASOS’s shares fell 4.2% on the London Stock Exchange in early trading after the announcement, wiping roughly £210 million from market capitalisation. The retailer, which posted a 2023 revenue of $5.1 billion, said the breach did not compromise payment data, but it will conduct a full audit of its notification system and review its third‑party vendor contracts.

Regulators in the United Kingdom and the United States have indicated they will monitor the situation closely. The UK’s Information Commissioner’s Office (ICO) reminded firms that “prompt, transparent communication” is required under the GDPR, while the U.S. Federal Trade Commission warned that repeated incidents could trigger enforcement actions.

Investors are watching the fallout for signs of longer‑term impact on customer trust and future earnings. Analysts expect ASOS to allocate up to £30 million toward enhanced security infrastructure in the next fiscal year, a move that could offset some of the short‑term share price pressure.

Key Takeaways

• The unauthorised notification was sent via ASOS’s mobile app, prompting a rapid user response and a surge in support queries.
• ASOS’s share price dropped 4.2% following the disclosure, reflecting investor concern over potential reputational damage.
• Regulatory bodies have flagged the incident, and the company plans to invest up to £30 million in security upgrades.

While the breach did not expose payment information, the episode highlights the growing cyber‑risk exposure for global retailers and the importance of robust notification controls to protect both customers and shareholder value.