Asos Confirms Hackers Sent 'Unauthorized' Notification to App Users

ASOS has disclosed that hackers compromised third-party platforms associated with the clothing and beauty retailer and transmitted an unauthorized "ASOS HACKED" notification to app users. The breach may have exposed some personal data, though Asos does not consider payment-card information or passwords to be at risk. On Tuesday night, the company issued an apology to customers through email, cautioning them against interacting with the notification.

Asos assured shoppers that the website and app were functioning normally and emphasized their ability to continue shopping with confidence during the investigation. The Information Commission's Office (ICO) in the UK has not yet been notified of the breach. The number of Asos customers who received the notification is still unspecified, but the ASOS app has been downloaded over 10 million times on Android devices.

The British retailer operates in approximately 150 markets, catering to around 17 million customers annually. Users of the Asos app in Australia, France, Sweden, and the Republic of Ireland also received the notification, according to local reports. A notification, headed "ASOS HACKED," was sent around 10:00 BST on Tuesday to Asos's data protection officer and IT teams.

The message demanded engagement with the hackers or threatened to leak sensitive information, including a link to a Telegram channel. Snowflake, a data management platform utilized by numerous businesses for data storage and analysis, stated that it is actively investigating the incident but has not detected any compromise of its platform.