The attackers claim to have stolen customer data from the company's Snowflake environment, a cloud-based data platform. ASOS has acknowledged the breach but has not yet disclosed the full scope of the incident or how many customers may be affected.

Key details:

• Unauthorized push notifications were sent via the ASOS mobile app
• The notifications contained the text "HACKED"
• Attackers claim to have exfiltrated customer data from ASOS's Snowflake environment
• ASOS has confirmed the breach but has not released further details on affected records or remediation steps

This incident adds to a growing list of companies investigating breaches tied to Snowflake environments, where attackers have targeted misconfigured or credential-compromised cloud data instances.

Source: BleepingComputer

Has your organization reviewed its Snowflake access controls and monitoring in light of these ongoing cloud data platform attacks?