UK online retailer ASOS shares drop on reports of cybersecurity breach
ASOS app users in the UK have been receiving pop-up notifications from hackers, in what appears to be an apparent breach of the company's security. Multiple individuals have contacted the BBC about encountering a peculiar message on their phone screens, seemingly originating from the ASOS app. The message reads, "Dear ASOS DPO and IT, we have fully compromised the Snowflake instance.
Engage with us, or we will leak it." ASOS has not yet commented on the matter. Social media users have also reported receiving the message, expressing confusion about its meaning. Despite the extortion-like message being sent directly to customers, it is addressed to Asos's data protection officer (DPO) and IT team. The hackers claim to have "fully compromised the Snowflake instance," referring to the data storage company Snowflake.
While it is unclear whether ASOS is a customer of Snowflake or what data, if any, is stored with the service, Snowflake has been involved in numerous high-profile data breaches in recent years, including incidents targeting Ticketmaster and Santander.
Written by urgent.news from BBC News's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
- ASOS app users receive notifications from hackers in apparent breach bbc.co.uk
- UK retailer Asos falls 10%+ after customers received app notifications saying "we have fully compromised the Snowflake instance"; source: Asos is investigating (Financial Times) ft.com
- Shares in British clothing company ASOS dive after hackers apparently send push notification therecord.media
- UK online retailer ASOS shares drop on reports of cybersecurity breach channelnewsasia.com