Asos Hackers Told the BBC Their Haul Went Past Contact Details

Cyber criminals behind the Asos breach told the BBC it went beyond the "basic contact details" that had been disclosed, and the BBC reports the retailer issued an update after the corporation was contacted by the attackers.

So there are two competing descriptions of the same incident: the intruders' account of what they took, and the company's revised position. Attackers have every reason to inflate a haul. A disclosure that starts narrower than the reality is its own kind of problem.