'ASOS hacked': App users receive notifications apparently sent by hackers

Asos users across the UK have been sent pop-up messages from its app that appear to have been sent by hackers trying to extort the company.
"Dear ASOS DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it," the message reads.
"If confirmed, this is a deeply serious attack because the hackers appear to have done something particularly brazen: turned ASOS's own app into their ransom note," says Charlotte Wilson, head of enterprise at cyber-security firm Check Point.
On social media, dozens of people have posted about receiving the message - confused as to what it means.
The message claims the unnamed hackers have "fully compromised the Snowflake instance".
It is not known if ASOS is a customer of Snowflake or what data, if any, is stored with the service.
It is, however, very unusual for a data breach to be revealed quite so publicly - and for customers to be informed in this manner.
They have posted only three times with the latest being about the ASOS hack.
"Sending a push notification to ASOS's app users would require access to the company's notification system, which is separate from the Snowflake data platform the attackers claim to have compromised."
0:59Why are students protesting in France? 00:00:59, play videoWhy are students protesting in France?
2:24'I thought I was a monster' 00:02:24, play video'I thought I was a monster'
Dive deeper
- Asos users across the UK have been sent pop-up messages from its app that appear to have been sent by hackers trying to extort the company.
- "Dear ASOS DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it," the message reads.
- "If confirmed, this is a deeply serious attack because the hackers appear to have done something particularly brazen: turned ASOS's own app into their ransom note," says Charlotte Wilson, head of enterprise at cyber-security firm Check Poin
- On social media, dozens of people have posted about receiving the message - confused as to what it means.
- The message claims the unnamed hackers have "fully compromised the Snowflake instance".