Asos's email to customers on 8 October 2026 confirmed that data profiles were taken, as BBC News and The Guardian reported; counted as confirmation on Pavlo's decision of 14 October.
History. 6 of 6, within 0 to 7 days. The two latest came after the hackers had put data on their own site.
Hunch. Asos says only that names and contact details may have been accessed, and it is still investigating with outside advisers.
The confirmation market resolves on Asos statements on asosplc.com or its stock market announcements: YES if by the end of 13 October Asos says customer data was stolen or that data posted by the hackers is real, NO if it does not or says no data was taken. Saying data may have been accessed is not enough. BBC News and The Guardian are the backup.
We looked for cases where hackers publicly threatened to leak a company's data while the company had not yet confirmed any theft. We found six such threats from 2015 to 2025 in BBC News and Guardian reports. All six companies confirmed the theft within a week, and in three the hackers posted the data within a month.