ASOS Hacked, Attackers Threaten Data Leak in Unusual Customer Alert

International fashion retailer ASOS experienced a significant security breach, with numerous users, including Israelis, reporting an unusual push notification from the company's app. The message claimed attackers had gained full control of the company's cloud platform, specifically its Snowflake environment, and threatened to leak data if their demands were not met. The notification, sent to mobile phones, stated, "ASOS has been breached. We have taken full control of your Snowflake environment, of the DPO and ASOS IT team. Contact us, or we will leak the information," and included a link to a Telegram channel.

Initial analysis suggests the attackers successfully accessed ASOS's notification system. The primary target appears to be the Snowflake cloud platform, which ASOS uses for data storage and processing. The hackers demanded contact from the company's Data Protection Officer (DPO) and IT teams, threatening to release stolen data if their demands are ignored.

While the exact nature of the compromised data remains unclear, the claim of full control over the cloud system raises concerns about the potential exposure of customer information. ASOS users are strongly advised not to click the Telegram link or engage with the attackers.