ASOS Confirms Data Breach Involving Customer Information
UK-based fashion retailer ASOS has confirmed a data breach affecting customer information. Hackers accessed the company's third-party platform used for communication, stealing names, contact details including home addresses and phone numbers, as well as notes on customer profiles such as website search history. The hackers sent an unauthorized notification through ASOS' app to customers, warning that they had fully compromised data hosted on Snowflake. The message demanded engagement from the company or threatened a public leak of stolen information. It is unclear whether multi-factor authentication was in place for the affected system and how access to push notifications was obtained. Snowflake has stated it did not experience any breach within its own systems, suggesting that ASOS' specific instance may have been compromised through impersonation tactics. The incident highlights growing concerns around third-party data security as similar breaches occurred earlier this year at fintech firm Betterment.
Tickers: $SNOW
Topics: customer_data_compromise cyberattack third-party_vulnerability