CONNECT WITH US
Tech

Tech

Asos hit by extortion hack that may have compromised some customer data

Engadget logo

Published on

Add as a preferred source on Google
Asos hit by extortion hack that may have compromised some customer data

The attackers sent a push notification to Asos shoppers announcing their activity.

UK-based fashion retailer Asos is doing damage control after its customers were sent a push notification claiming that its cloud services had been hacked. According to The Guardian, Asos users received mobile alerts that were addressed to the company's data protection officer and IT personnel.

The notifications read: "Dear Asos DPO and IT, we have fully compromised the Snowflake instance. Engage with us or we will leak it." Snowflake is a cloud service that handles push notifications as well as managing data about transactions and customer demographics. A link in the message sent users to a Telegram channel claiming to be operated by Xuanye Group, a reportedly unknown name among most cybersecurity circles.

According to the company's statement, "We are investigating unauthorised activity involving third-party platforms that we use to communicate with customers. We took immediate action to restrict access to the notification platforms and are working with our internal and external specialist advisers, as well as all relevant authorities."

Asos said that although customers' names and contact information may have been accessed in the hack, it did not believe payment details or passwords had been compromised. The company added that its app and website were operating as usual.



Source link

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.