
在BBC联系黑客后,Asos就数据泄露的严重程度向客户发出警告。
Asos warns customers about full extent of data breach after BBC contacted by hackers Names, addresses, phone numbers, emails and customer numbers are now in the hands of cyber criminals.
网络犯罪分子目前已经掌握了姓名、地址、电话号码、电子邮箱和客户编号。
By Joe Tidy Asos has told its customers hackers are in possession of detailed profiles of potentially millions of the online store's users.
乔·泰迪(Joe Tidy)报道称,Asos已告知客户,黑客掌握了该在线商店数百万潜在用户的详细个人资料。
It issued the update after BBC News told the retailer it had been contacted by cyber criminals who said this week's breach went beyond "basic contact details" Asos previously said might have been accessed.
此前Asos曾表示可能泄露的仅为“基本联系方式”,但在BBC新闻告知零售商其本周早些时候曾被声称掌握更多信息的网络犯罪分子联系后,Asos发布了此次最新通报。
So too are the searches customers have made on the website. Terms like "reclaimed vintage", "glamorous wide fit" and "Asos petite" are visible in the data.
客户在网站上的搜索记录也一并遭到泄露,数据中可见诸如“复古回收”、“迷人宽版”和“Asos娇小”等搜索词。
With this information, scammers may be able to craft potent phishing attack emails or phone calls.
利用这些信息,诈骗者可能会精心设计出极具欺诈性的钓鱼邮件或电话。
The risk to individuals is now higher and customers are being warned about potential impersonation scams.
目前个人面临的风险正在上升,客户已被提醒防范潜在的冒充诈骗。
In its email to customers, Asos confirmed data profiles were taken but said no bank details or passwords were accessed.
在给客户的电子邮件中,Asos证实数据资料已被窃取,但表示未涉及银行信息或密码的泄露。
"Please remain cautious of unexpected messages or calls claiming to be from Asos," it said.
“请警惕任何自称来自Asos的意外消息或电话,”该公司表示,“我们绝不会通过未经请求的消息或电话要求您分享密码、安全码或支付详情。”该公司未回应有关泄露规模的问题。
"We will never ask you to share passwords, security codes or payment details through an unsolicited message or call." The company did not respond to questions about the scale of the breach.
这起备受瞩目的黑客攻击事件于周二成为全球头条新闻,当时网络犯罪分子利用Asos自身的应用系统向可能多达数百万的用户发送了弹窗通知。
The high profile hack made global headlines on Tuesday when cyber criminals used Asos's own app system to send a pop up notification to potentially millions of people.
当天晚些时候,该公司通过伦敦证券交易所向股东证实,该弹窗是由“未授权的第三方”发送的,“包括姓名和联系方式在内的基本个人信息可能已被访问”。随后,该公司向客户发送了一封措辞类似电子邮件。
Later that day the firm confirmed to shareholders via the London Stock Exchange that the pop up was sent by an "unauthorised third party" and "basic personal information including name and contact details may have been accessed." The company then sent an email to customers with similar wording.
周三晚间,负责此次攻击的网络犯罪分子联系了BBC,并分享了一份被盗数据的样本,从而揭示了黑客攻击的真实规模。
On Wednesday evening the cyber criminals responsible contacted the BBC sharing a sample of the stolen data which showed the true extent of the hack.
