Asos Confirms Data Breach After Hackers Send Rogue App Notification
UK fashion retail giant Asos has confirmed a data breach affecting its customers' personal information. Hackers infiltrated a third-party platform used for customer communications and sent an unauthorized push notification through the official Asos app. The stolen data includes names, contact information, home addresses, phone numbers, email addresses, and customer profile notes such as website search queries. The hackers, identifying themselves as the Xuanye Group, used the notification to pressure the company into negotiations under threat of leaking the data. According to reports, the attackers gained access by impersonating a trusted contact to steal login credentials for the company's Snowflake instance. Asos is currently investigating the incident and responding to the security breach.