Asos App Users Hit by Unauthorised Push Notification Claiming Snowflake Compromise
On Tuesday morning, users of the Asos app in the UK received alarming pop-up notifications from hackers who claimed to have breached the Snowflake instance and threatened to release sensitive data. In response, Asos swiftly restricted access and is currently conducting an investigation alongside advisers and authorities. Snowflake asserted that its platform had experienced "no compromise." Asos reached out to customers via email to apologize for the "unauthorised push notification" and cautioned against clicking on the external link. While the incident may involve basic personal information, it does not include payment card details or passwords. The identity and motives of the sender remain unknown, and experts have warned about possible exploitation of the situation. Asos confirmed that its website and app are functioning normally and are focused on safeguarding customer interests.
Key facts
- Asos app users across the UK received pop-up messages on Tuesday morning
- The message claimed: "we have fully compromised the Snowflake instance. Engage with us, or we will leak it"
- Asos said it restricted the apparent hackers' access and was investigating with advisers and authorities
- Snowflake told the BBC its investigations had "found no compromise" of its platform
- Asos said accessed data may include "basic personal information including name and contact details"
- Asos said payment-card information and account passwords were not believed to be impacted
- Charlotte Wilson of Check Point said "the biggest immediate risk may be what happens next"
- Dr Richard Horne, CEO of the NCSC, urged customers to "stay vigilant to suspicious messages"
Entities
Artists
- Charlotte Wilson
- Kat Cereda
- Dr Richard Horne
Institutions
- Asos
- Snowflake
- BBC
- Check Point
- Which?
- National Cyber Security Centre
- NCSC
- Telegram
Locations
- UK