Asos app users receive extortion alerts threatening data leak
Asos customers received a push notification claiming the retailer's Snowflake cloud database was compromised, prompting an investigation into unauthorized activity and triggering a double-digit stock drop.
Millions of Asos app users received an extortion push notification on Tuesday morning headed 'ASOS HACKED.' The alert, addressed directly to the retailer's data protection officer and IT team, claimed hackers had fully compromised the company's Snowflake database instance and threatened to leak the data unless Asos engaged with them through a provided chat link.[1][2][5][6][8]
Asos said some basic personal info may have been accessed in connection with the incident, according to Business Insider. The company is actively investigating unauthorized activity, reported The Straits Times and the Financial Times. Reports cited by AGTP have linked the incident to the hacking group Scattered Spider, though Asos has not officially confirmed the breach or its attribution.[4][5][6][7][9]
The breach notification rattled investors, sending Asos shares down more than 10% in their steepest fall in a year, according to Bloomberg, with Quartz reporting a 13% decline in a single day.[3][4][6][8]
Key facts
- Asos customers received a push notification headed 'ASOS HACKED' addressed to the retailer's data protection officer and IT department.
- The extortion message claimed Asos's Snowflake instance was 'fully compromised' and threatened to leak data unless the company responded via a chat link.
- The push notification was broadcast widely, reaching millions of shoppers according to Quartz.
- Asos confirmed that some basic personal information may have been accessed and said it is investigating unauthorized activity.
- Asos shares fell between 10% and 13% following the notification, marking their largest slump in a year.
- Reports linked the intrusion to the cyber group Scattered Spider, an attribution Asos has not confirmed.
Sources · 9 sources
- DE
Dexerto@DexertoPost on X ·
ASOS users have been sent a threatening notification claiming the clothing store's data is “fully compromised” The message says they'll leak data unless ASOS responds https://t.co/k3XiArbs8N
Open source - TI
The Independent@IndependentPost on X ·
Everyone with the app was seemingly sent the alarming threat Read in full: https://t.co/1qQX7syqC9 https://t.co/vllCpmJdmI
Open source - BL
Bloomberg@businessPost on X ·
Asos shares slumped the most in a year after users of its shopping app received a notification indicating its systems were hacked https://t.co/kgd63WRVYA
Open source - TE
Techmeme@TechmemePost on X ·
UK retailer Asos falls 10%+ after customers received app notifications saying "we have fully compromised the Snowflake instance"; source: Asos is investigating (Financial Times) (Visit Techmeme dot com for the link and full context!)
Open source - BI
Business Insider@BusinessInsiderPost on X ·
Customers posted screenshots of a notification that declared "ASOS HACKED." The retailer said some basic personal info may have been accessed. https://t.co/RAwjX8R9pt
Open source - AG
AGTP@AGTPinsightsPost on X ·
ASOS just sent its own app users an apparent hacker extortion alert today. Here's what you need to know. On Tuesday morning, ASOS customers across the UK received a pop-up push notification from the ASOS app. It appears to have been written by cyber attackers trying to extort the company. The message read: "Dear ASOS DPO and IT, we have fully compromised the snowflake instance. Engage with us or we..." It then shared a chat link for ASOS to contact the attackers. DPO means data protection officer. The notification was reportedly headed "HACKED". The message is aimed at ASOS staff, not shoppers, but it landed on customers' phones. Users shared screenshots and reacted with shock. Some pointed to Snowflake, the cloud data platform, being named as the target. Others said it looks like another data leak. Reports have linked the attack to a hacking group called Scattered Spider. ASOS has not confirmed that. Key numbers: - ASOS shares fell more than 10%, with one report saying 11%, after the message went out - The alert reached UK app users on Tuesday morning - The attackers claim the Snowflake instance is "fully compromised" ASOS has not confirmed the breach or the attribution, and it is unclear what data, if any, was taken.
Open source - TS
The Straits Times@straits_timesPost on X ·
Online fashion giant Asos probes ‘unauthorised activity’ after hacking phone alerts https://t.co/mZIlmOplCC
Open source - QU
Quartz@qzPost on X ·
Hackers sent a ransom note directly to ASOS customers' phones A push notification threatening to leak stolen data hit millions of ASOS app users — and wiped 13% off the retailer's stock in a single day. The brazen tactic, which also rattled Snowf #ASOS #Cybersecurity #Snowflake https://t.co/xAUtfaNjwB
Open source - EN
Engadget@engadgetPost on X ·
The attackers sent a push notification to Asos shoppers announcing their activity. https://t.co/wr5I4Vc4qJ
Open source