AI News Feed
Market watch
Companies

ASOS Says Hackers Sent Unauthorized 'ASOS HACKED' Push Notification to App Users

ASOS says hackers gained access to third-party platforms and sent an unauthorized 'ASOS HACKED' push notification to customers in an apparent extortion attempt. Basic personal data may have been accessed, but payment-card data and passwords are not believed affected.

The notification was sent at around 10:00 BST on Tuesday, the BBC reported. It was headlined 'ASOS HACKED' and addressed to the company's data protection officer and IT teams. The message said: 'We have fully compromised the Snowflake instance.' It added: 'Engage with us, or we will leak it,' before linking to a Telegram channel. The message left many ASOS customers confused.

In an email to customers on Tuesday night, ASOS apologized and urged customers not to engage with the notification. The company said its website and app were 'operating as usual' and promised customers they could 'shop with confidence' while it investigates the incident. ASOS has not yet informed the UK's data watchdog, the Information Commissioner's Office, about any breach, according to the BBC.

Exactly how many ASOS customers received the notification on Tuesday remains unclear. Google's Play store says the ASOS app has been downloaded to Android devices more than 10 million times. ASOS serves around 17 million customers each year across more than 150 markets. Local reports on Tuesday said some ASOS app users in Australia, France, Sweden and the Republic of Ireland had also received the notification.

The message referenced a 'Snowflake instance.' Snowflake, whose tools are used by dozens of firms to collect, analyze and store data, told the BBC its investigation was ongoing, but it had so far found 'no compromise' of its platform.