ASOS confirms data breach after “HACKED” in-app notifications
-
UK fashion retailer ASOS has confirmed a data breach after unauthorized push notifications were sent through its mobile app. The notifications displayed the word "HACKED" to users, according to reports.
The attackers claim to have stolen customer data from the company's Snowflake environment, a cloud-based data platform. ASOS has acknowledged the breach but has not yet disclosed the full scope of the incident or how many customers may be affected.
Key details:
- Unauthorized push notifications were sent via the ASOS mobile app
- The notifications contained the text "HACKED"
- Attackers claim to have exfiltrated customer data from ASOS's Snowflake environment
- ASOS has confirmed the breach but has not released further details on affected records or remediation steps
This incident adds to a growing list of companies investigating breaches tied to Snowflake environments, where attackers have targeted misconfigured or credential-compromised cloud data instances.
Source: BleepingComputer
Has your organization reviewed its Snowflake access controls and monitoring in light of these ongoing cloud data platform attacks?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login