ASOS confirms data breach following in-app notification hack
UK fashion retailer ASOS confirmed a security breach after unauthorized push notifications claiming data theft were sent through its mobile app.
UK-based fashion retailer ASOS has confirmed a data breach on Tuesday after unauthorized push notifications were broadcasted to users through its mobile application. The hackers behind the stunt claimed to have stolen customer data from the company's Snowflake environment.
The incident caused significant surprise among app users as the notification system was hijacked to display messages featuring the word 'Hacked'. These alerts reached numerous users before the company's security teams managed to intervene.
ASOS representatives stated that they are actively investigating the breach and assessing the security of the systems involved. The company is currently verifying whether the attackers genuinely gained access to sensitive customer records stored within the Snowflake platform.
This security lapse highlights the ongoing risks associated with cloud service integrations and mobile application infrastructure in the retail sector. For tech and e-commerce platforms operating globally and regionally, it serves as a critical warning regarding third-party environment security.
Further details regarding the exact volume of compromised data or affected customers have not yet been officially disclosed. ASOS continues its investigation and remains focused on securing its digital platforms against further unauthorized access.
