ASUS confirms security breach involving customer data

ASUS, a major consumer electronics company, disclosed a cyber security breach in which hackers gained access to its eShop network and exfiltrated sensitive customer information.

 

ASUS is a Taiwan-based global technology company known for computer hardware, consumer electronics, and mobile devices. A leading motherboard and PC manufacturer, it offers popular laptop lines such as Vivobook, Zenbook, and ProArt, along with its gaming-focused ROG and TUF Gaming ecosystems.

 

Recently, ASUS has started notifying its customers of a data security incident where threat actors breached the internal network of its online sales platform and accessed confidential data. The company immediately launched an investigation, with assistance from cyber security experts, to determine the nature and scope of the incident.

 

“At ASUS, we take the security of personal information seriously. Protecting the information entrusted to us is important and, in keeping with that commitment, we want to let you know about an incident that may have affected some of your information,” ASUS said in its letter.

 

The compromised data included certain customer order information, including contact details and order records. 

 

“We are not currently aware of any misuse of this information or any harm suffered by affected individuals. No payment card, bank account or other financial information was involved,” the hardware giant added.

 

The company added that it took steps to contain the incident and implemented additional security measures to protect the affected systems. The investigation is ongoing, and ASUS has found no evidence of continued unauthorised access.

 

ASUS has urged customers to remain vigilant and stay alert when receiving any unexpected or suspicious communications that appear to come from Asus or reference its products, services, accounts, or orders.

 

As of publication, no known hacker group had claimed responsibility for the cyberattack on ASUS. The company also did not disclose who was behind the attack, the amount of data compromised, or whether it had received a ransom demand.