Asos confirms breach of customer data after hackers send rogue app notification
Asos confirmed hackers stole customer contact data from a Snowflake platform and sent a rogue app notification.
UK retailer Asos told the London Stock Exchange that attackers accessed a third-party platform used to communicate with customers and stole names and contact information. BBC reporting says the data also includes home addresses, phone numbers, email addresses, and profile notes such as website search queries. The intruders, calling themselves Xuanye Group, sent an unauthorized in-app notice saying data hosted on Snowflake was compromised and demanding engagement or they would leak it. Reports say they obtained login credentials by impersonating a trusted contact; Snowflake said its own systems were not breached, and the number of stolen records is unknown.