DisclosureLens
HackingRetail & ConsumerRetailStolen CredentialsCustomer Data InvolvedIdentity (basic)Financial accountMediumContained

ASOS US Sales LLC

bd_bba5f30ffcc25235 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jul 28, 2026

Filed

Sep 9, 2026

To disclose

6 weeks

Affected

1,279state residents only

Linked

3 filings

Confidence

66%
Full breach record for ASOS US Sales LLC

ASOS US Sales LLC detected unusual activity on July 28, 2026, and confirmed on July 29, 2026, that an unauthorized third party accessed customer accounts using login credentials obtained from an external source. Affected data may include name, email, address, phone, last four digits of payment card, expiration date, social media details, and date of birth. Accounts were secured, access blocked, and mandatory password resets imposed. Notifications were sent on July 30, 2026.

South Carolina clock SC CRA notice due6 weeks discovery → filing

Incident timeline

discovery → filing · 6 weeks / 43 days

Jul 28, 2026

Discovered

Sep 9, 2026

Filed

vs. sector median

2 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
South Carolina State AG+8d · this page

Pattern: first filing Sep 1 (MA), last Sep 9 (SC) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.