Asos app delivers a data leak threat instead of fast fashion

Asos customers have received suspicious notifications regarding a potential data breach in the company's Snowflake instance. The messages, sent via Telegram, warned about the compromise and threatened to leak the data if not addressed. The notification specifically targeted Asos's Data Protection Officer and IT team, demanding engagement or risking data exposure.

The Register has reached out to Asos and Snowflake for comment on the incident. However, the authenticity of the sender and the extent of data exposure remain uncertain. The notification caused Asos's share price to drop by approximately 12 percent, though it has since stabilized. Meanwhile, Snowflake, a cloud platform for data storage and analysis, experienced a significant data theft campaign in 2024, affecting numerous organizations such as Ticketmaster, Santander, AT&T, and many others.

Connor Riley Moucka, a 26-year-old from Ontario, pleaded guilty to various cybercrimes related to the hacking spree that compromised over 165 organizations, exposed billions of customer records, and resulted in roughly $2.5 million in ransom payments. In response to the breach, Snowflake implemented additional security measures, including the requirement of multi-factor authentication for administrators.