Asos hackers duped employee in data breach
The hackers behind a threat to leak Asos customer data duped an employee by posing as a “trusted contact,” the fast-fashion group has said. An unknown group shocked Asos’ millions of customers on Tuesday when they published a push notification on the online retailer’s app, claiming to have hacked into the company and threatening a [...]
An unknown hacker group targeted Asos by impersonating a trusted contact, duping an employee into revealing login credentials. This led to the hackers gaining access to certain third-party platforms used by the fashion retailer. The incident prompted Asos to publish a push notification on its app, warning customers of a potential data leak.
The company immediately suspended its platforms and referred the matter to law enforcement and regulatory authorities. Shares in Asos, listed on the FTSE-250, dropped more than 13 percent following the hack. Despite reassurances from Asos that hackers did not access payment information or passwords, they did obtain some personal details.
The company apologized for the uncertainty caused and pledged to strengthen security controls. Asos users were notified about the hack through a notification on the app, which included a link to a Telegram channel where the hackers claimed to have obtained customer information. Snowflake, the cloud platform used by Asos, denied any compromise of its systems.
Written by urgent.news from City AM's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
Also reported by 4 other outlets
- Asos warns customers about full extent of data breach after BBC contacted by hackers bbc.co.uk
- UK’s ASOS says cyber hack accessed customers’ personal data straitstimes.com
- Asos says hackers tricked an employee into handing over their work account login qz.com
- UK's ASOS says breach exposed some customer personal data channelnewsasia.com
