ASOS App Security Alert
ASOS customers report receiving alarming app push notifications threatening a data leak.
Anonymous
Key Points
1
The Telegram link led to a channel that asked users to join a second broadcast channel, which it described as “legitimate.”
2
Reports of the notification appeared to come from outside the UK as well as within it, according to posts on social media.
3
Downdetector had received more than 400 reports of issues involving ASOS, according to The Sun.
4
The notification was delivered as a push alert to people who had the ASOS mobile app installed.
ASOS customers received alarming push notifications claiming the company's Snowflake database had been compromised and threatening to leak customer data. Daily Mail reported the message included a Telegram link, which security experts warned users not to click. Hundreds of shoppers reported the notifications on social media, and an outage tracking site registered over 400 app access problems during the incident.
ASOS had not publicly confirmed a breach or data leak at the time of reporting. Cybernews noted the notification was delivered as a mobile app alert to ASOS customers globally, extending beyond the UK. The threat message asked for contact through Telegram but did not provide clarity on the attackers' demands or timeline.
Threatening Messages Target Thousands of Shoppers
The notification, titled "ASOS HACKED," told customers their personal information was at risk. Metro reported the message claimed the company's Snowflake instance had been "fully compromised." The alert directed users to a Telegram channel, warning them not to click the link. Security researchers flagged the message as a potential scam or extortion attempt targeting worried customers.
Reports came from ASOS app users across multiple countries, not just the UK. STV News confirmed thousands of shoppers received the suspicious notification. The message's authenticity remained unverified, and no independent confirmation of a data breach emerged from security researchers or industry sources.
Snowflake Targets Draw Intense Hacker Interest
Snowflake database systems have become prime targets for cybercriminals in recent months. Several high-profile companies using Snowflake have suffered breaches, making the platform a known vulnerability point. Hackers often exploit weak credentials or misconfigurations to gain access to customer data stored in cloud databases.
The ASOS notification exploited customer fears about Snowflake security. Attackers may have sent the fake alert to pressure the company into paying a ransom. Cedar News noted the message's timing and widespread distribution suggested a coordinated effort rather than a random spam campaign.
App Outages Spike as Users Panic and Investigate
Downdetector received more than 400 reports of ASOS app problems during the incident, The Sun reported through Daily Mail's coverage. Users flooded the platform trying to check their account security and determine if their data was compromised. The surge in login attempts likely contributed to app slowdowns and access failures.
ASOS remained silent on the incident, neither confirming nor denying a breach. The company did not issue a public statement warning customers to change passwords or monitor accounts for fraud. Security experts recommended users enable two-factor authentication and watch for suspicious charges, even without official confirmation of a data leak.
Sentiment
Mostly NegativeNEGATIVENEUTRALPOSITIVE
Publishers
56
Articles
150
Reach
206
A
AnonymousAuthor
