ASOS app users receive notifications from hackers in apparent breach

ASOS app users have reported receiving unauthorized push notifications from hackers claiming to have compromised the company's Snowflake data instance. The messages appear to be an extortion attempt directed at the retailer's IT and data protection teams.
Why it matters
This incident highlights the ongoing vulnerability of third-party data storage services and the potential for hackers to use consumer-facing apps as a platform for corporate extortion.
Image source, Getty Images By Joe Tidy Cyber correspondent Published 11 minutes ago Asos users across the UK have been sent pop-up messages from its app that appear to have been sent by hackers trying to extort the company.
Dozens of people have told the BBC about receiving a strange message from the clothing and beauty store's app, appearing on their phone screens.
"Dear ASOS DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it," the message reads.
Asos did not immediately respond to the BBC's requests for comment.
On social media, dozens of people have posted about receiving the message - confused as to what it means.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in