Hackers send extortion message through ASOS app
Hackers took control of ASOS's app notification system and sent a message to users claiming to have breached the company's Snowflake platform and stolen data. ASOS confirmed unauthorized access to its third-party customer communication tool and said that some basic personal details, such as customer names and contact information, may have been accessed. The company does not believe payment or password data were exposed. Investigations are ongoing, and ASOS has restricted access to affected systems.
- Hackers sent push notifications to ASOS app users
- Attackers claimed to have accessed Snowflake environment
- Basic customer info like names may have been involved
- ASOS does not believe passwords or card data were breached
- Incident caused a drop in ASOS's share price
Sources covering this
How it unfolded
- The Record Shares in British clothing company ASOS dive after hackers apparently send push notification
- TechRadar ASOS hacked? Customers receive threatening notification from hackers, here’s what we know
- BBC ASOS app users receive push notifications apparently sent by hackers
- Infosecurity Magazine ASOS Customers Receive Bizarre “Hacked” Message Amid Suspected Snowflake Compromise
- The Register Asos app delivers a data leak threat instead of fast fashion
- BleepingComputer ASOS confirms data breach after “HACKED” in-app notifications
- Business Insider ASOS customers got an ominous notification this morning. Here's what the retailer is telling users.
In this story
More in Cybersecurity
ClickFix attacks use browser cache to smuggle payloads
A recent ClickFix campaign is hiding malicious Visual Basic scripts disguised as image files in browser caches on victims' devices,…
Phishing campaign uses fake AI ad tools to steal credentials
Researchers report a phishing operation targeting digital advertising professionals through counterfeit AI tools like ChatGPT, Gemini,…
Nikkei reveals breaches of employee email accounts
Japanese media group Nikkei disclosed that two employee cloud email accounts were breached in separate incidents this year.
Oracle Health breach exposed data of nearly 20 million
A cyberattack on Oracle Health in early 2025 exposed sensitive data belonging to nearly 20 million people, according to the Texas…