ASOS hacked? Customers receive threatening notification from hackers, here’s what we know

2 hours ago 7

ASOS website displayed on smartphone hidden in jeans pocket

ASOS app users received a threatening notification on Tuesday morning
The message states that ASOS' Snowflake instance has been compromised
There has so far been no confirmation from ASOS

Customers of online shopping giant ASOS have received a notification apparently suggesting the site has been hacked.

The message, written but the hackers, was sent out via a mobile app notification on Tuesday morning.

“Dear ASOS DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it”, the message reads, before linking out to a Telegram chat.

Has ASOS been hacked?

ASOS has not released a breach notification as of the time of publication, but according to Down Detector, users began reporting issues with the ASOS app just before 10am Tuesday morning.

A notification distributed by the ASOS app with a message stating that the company's Snowflake instance has been hacked.

The notification is directed towards ASOS’ Data Protection Officer. A DPO is responsible for a company’s data security strategy and compliance with key data protection legislation.

Snowflake is a well-known Software-as-a-Service (SaaS) that organizations use as a dedicated cloud environment. A Snowflake ‘instance’ in this sense refers to an organization’s account. Snowflake environments are used to store, process, and analyze data.

Under UK law, ASOS has to disclose any data breaches to the Information Commissioner’s Office within three days, and notify those affected when the breach is classified as ‘high risk’.

Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!

According to ASOS, the online shopping site had 17 million customers across 150 countries. Many of these customers are located in the UK, where the company’s headquarters are also located. ASOS also has a strong customer base in the European market.

TechRadar Pro has contacted ASOS for comment, but has not yet received a response.

Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.

Benedict is a Senior Security Writer at TechRadar Pro, where he has specialized in covering the intersection of geopolitics, cyber-warfare, and business security.

Benedict provides detailed analysis on state-sponsored threat actors, APT groups, and the protection of critical national infrastructure, with his reporting bridging the gap between technical threat intelligence and B2B security strategy.

Benedict holds an MA (Distinction) in Security, Intelligence, and Diplomacy from the University of Buckingham Centre for Security and Intelligence Studies (BUCSIS), with his specialization providing him with a robust academic framework for deconstructing complex international conflicts and intelligence operations, and the ability to translate intricate security data into actionable insights.

Read Entire Article