Inside the ASOS Hack: How One Stolen Login Reached Millions of Customers
Attackers don't break in anymore. They log in.
On 6 October 2026, ASOS customers got a push notification from someone claiming to have hacked the company. ASOS later said the attacker posed as a trusted contact, got hold of an employee's login, and used it to reach third-party platforms.
In this episode of Radio Logic, Anders Askåsen sits down with OTW of Hackers Arise to break down what happened, how an attacker thinks, and what defenders can actually catch.
We dig into:
- Why social engineering is still behind most attacks in 2026
- How one set of credentials moved across multiple systems
- What an attacker does next: the hidden privileged account
- The warning signs security teams should catch in real time
- The real cost of a breach, from share price to lost trust
- What ASOS customers should do right now
- How AI is speeding up attacks and helping defenders
OTW's big message? It's not about who got tricked. It's about how much that one identity could reach.
Check if your details have been leaked: https://haveibeenpwned.com
Learn more about Hackers Arise: https://hackers-arise.com
Learn more about Radiant Logic: https://www.radiantlogic.com
What is Radio Logic?
Cybersecurity podcast Radio Logic delivers essential, no‑nonsense conversations with trusted experts on all things identity security. Hosted by Anders Askasen, SVP of Marketing at Radiant Logic and author of Cybersecurity Explained, the show draws on his 20+ years in security and digital identity to address today’s challenges.