ASOS, a major UK-based online fashion retailer, confirmed a data breach after hackers sent unauthorized push notifications through its mobile app on Tuesday morning. The attackers claimed to have compromised the company’s Snowflake environment and demanded engagement, threatening to leak stolen data. ASOS confirmed that unauthorized access occurred to third-party platforms used for customer communications, resulting in exposure of basic personal information such as names and contact details. The company advised customers to disregard the malicious notification and avoid clicking any external links it contained.
ASOS stated that payment card information and account passwords were not impacted by the breach. However, the company has not verified the threat actor’s claims about compromising its Snowflake environment or disclosed the number of affected customers. A group calling itself “Xuanye group” claimed responsibility for the attack and posted messages to a Telegram channel, stating that customer information was stolen but would remain secure for a designated period. The threat actors did not provide evidence of the breach or specify what customer data was allegedly taken.
Source: Read the full story at BleepingComputer
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
