ASOS app users hit by threatening notification; breach unconfirmed
ASOS customers received a message claiming its Snowflake instance was compromised. The retailer has not released a breach notification.
ASOS customers received a threatening notification through the retailer's mobile app on Tuesday morning, according to TechRadar Pro. The message claims that ASOS' Snowflake instance has been fully compromised and threatens to leak data unless the company engages with the sender.
The notification is addressed to ASOS' Data Protection Officer and IT department and includes a link to a Telegram chat. ASOS has not confirmed any breach, and the claim in the message has not been independently verified.
Users began reporting problems with the ASOS app just before 10am on Tuesday, according to Down Detector. ASOS has not released a breach notification as of publication.
TechRadar Pro said it contacted ASOS for comment but had not received a response at the time of publication. The Information Commissioner's Office (ICO) is listed among the entities linked to the story.
Background
According to ASOS, the online shopping site had 17 million customers across 150 countries, with many in the UK where its headquarters are located, and a strong customer base in the European market.
Quick answers
Has ASOS confirmed a data breach?
No. ASOS has not released a breach notification, and the claim that its Snowflake instance was compromised has not been confirmed by the company.
What did the ASOS app notification say?
The notification claims ASOS' Snowflake instance has been fully compromised and threatens to leak data unless ASOS engages with the sender. It is addressed to ASOS' Data Protection Officer and IT and links to a Telegram chat.
When did ASOS app users start reporting issues?
Users began reporting issues with the ASOS app just before 10am on Tuesday, according to Down Detector.