ASOS Confirms Data Breach After Hackers Send Push Notification

British fashion retailer ASOS confirmed on Friday that a data breach may have exposed basic personal information of customers worldwide, including those in Israel. The company issued a statement after customers received an unauthorized push notification on the ASOS app claiming the company's systems had been compromised. The notification, which included a link to a Telegram chat, stated that attackers had gained full access to the company's Snowflake account and threatened to leak data.

ASOS acknowledged the incident in an official statement and an Instagram story, urging customers to ignore the unauthorized message and not click the provided link. The company is investigating unauthorized activity related to third-party platforms used for customer communication. While immediate action was taken to limit access to notification platforms, ASOS stated that basic personal information, such as names and contact details, may have been exposed. However, they do not believe payment card details or account passwords were compromised.

The attackers claimed to have accessed ASOS's Snowflake account, a platform used by many retailers for storing and analyzing customer data, and which has been linked to previous cyberattacks on major companies like Ticketmaster and AT&T. The breach also raised concerns about the potential exposure of sensitive data like clothing and body measurements, as Snowflake hosts Simon AI, a system that compiles customer behavior and demographic information.

Following the reports, ASOS's stock price dropped by approximately 12%. The UK's National Cyber Security Centre (NCSC) reportedly offered assistance to ASOS. Experts noted that the attackers' ability to send a direct push notification indicates they gained access to at least some connected systems, likely as a tactic to pressure ASOS for a ransom payment. Customers were advised to disregard the notification, avoid contacting the attackers, and rely solely on official company updates.