Asos Plc said a recent data breach occurred after an “unauthorized party” impersonated a trusted contact and tricked an employee into giving up work account login details, according to Bloomberg.

The online fashion retailer said the breach involved the employee’s work account credentials.