Asos confirms breach of customer data after hackers send rogue app notification
Fashion retailer Asos has confirmed a data breach after hackers accessed a third-party platform to send unauthorized push notifications to customers. The hackers, identifying as the Xuanye Group, claim to have compromised sensitive personal data and are pressuring the company to engage with them.
Why it matters
The incident demonstrates the vulnerability of large corporations to supply-chain attacks and the increasing use of internal communication channels by hackers to extort victims.
UK fashion retail giant Asos has confirmed a data breach of its customers’ personal information after hackers used the company’s own app to notify users that the company had been compromised.
Asos said in a filing with the London Stock Exchange that hackers broke into a third-party platform hosting data that the company uses to communicate with customers.
The company said that names and contact information were taken in the breach.
BBC News reports that the stolen data includes home addresses, phone numbers, and email addresses, as well as notes relating to customer profiles, such as their website search queries.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in