ASOS Faces Potential Data Breach After Hackers Claim Snowflake Compromise

Online fashion retailer ASOS is investigating a potential data breach after customers in Israel reported receiving a push notification from the company's app, allegedly from attackers who claim to have compromised the firm's cloud platform. The notification, which appeared to originate from the attackers, stated, "ASOS HACKED. Dear Asos DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it: t.me/xuanyewengateway." The message suggests the hackers gained access to Snowflake, a cloud platform ASOS uses for data storage and processing, and are threatening to leak information unless the company engages with them. It is unclear what specific data was accessed, but the attackers claim full compromise of the platform, potentially including customer details. ASOS, a British company with a significant presence in Israel, has launched an investigation into the incident. The company's stock fell 12% in London following the reports. Cybersecurity experts noted that the push notification indicates the attackers may have also infiltrated systems controlling ASOS's mobile app, describing the incident as "public and clear extortion." They advised consumers to be wary of targeted phishing attempts while the situation is being verified. This potential breach follows similar cyber incidents affecting other British retailers, including Co-op, Harrods, and Marks & Spencer, with the latter having to temporarily shut down its website for security checks.