CONNECT WITH US
Cyber Security

Cyber Security

Asos confirms breach of customer data after hackers send rogue app notification

TechCrunch - Cyber Security logo

Published on

Add as a preferred source on Google
Asos confirms breach of customer data after hackers send rogue app notification

U.K. fashion retail giant Asos has confirmed a data breach of its customers’ personal information after hackers used the company’s own app to notify users that the company had been compromised.

Asos said in a filing with the London Stock Exchange that hackers broke into a third-party platform hosting data that the company uses to communicate with customers.

The company said that names and contact information were taken in the breach. 

BBC News reports that the stolen data includes home addresses, phone numbers, and email addresses, as well as notes relating to customer profiles, such as their website search queries.

Asos said the hackers sent an “unauthorised customer notification,” which many posted to social media. The notification addressed Asos’ data protection officer and IT department and said that the hackers “fully compromised” the company’s data hosted on Snowflake, a tech company that allows its corporate customers to analyze large amounts of data. “Engage with us, or we will leak it,” the notification reads.

By using the app’s own notification system to alert customers, the hackers are trying to pressure the company into engaging with them or risk having the stolen data published online.

The hackers reportedly broke into the Snowflake instance by “impersonating a trusted contact to obtain log in credentials,” reports Bleeping Computer . Snowflake said it had not experienced a breach of its systems. It’s unclear if the Asos-run Snowflake instance was protected with multi-factor authentication. It’s also not known how the hackers gained access to Asos’ system for sending in-app push notifications, which is often handled by a third-party service.


Source link
Related Topics:Cyber Security

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.