ASOS confirms data breach after “HACKED” in-app notifications

ASOS confirms data breach after “HACKED” in-app notifications
ASOS confirmed a data breach after unauthorized push notifications were sent through its mobile app, with attackers claiming access to the company’s Snowflake environment. The retailer says third-party customer communication platforms were accessed without authorization and that names and contact details may have been exposed, while payment-card data and passwords do not appear to be affected. #ASOS #Snowflake #XuanyeGroup

Keypoints

  • ASOS reported unauthorized access to third-party platforms used to contact customers.
  • Hackers abused the official ASOS mobile app to send fake breach notifications.
  • The attackers claimed they compromised ASOS’s Snowflake environment.
  • ASOS said basic personal information such as names and contact details may have been exposed.
  • The company said payment-card information and account passwords do not appear to be impacted.

Read More: https://www.bleepingcomputer.com/news/security/asos-confirms-data-breach-after-hacked-in-app-notifications/