Asos Shares Drop After Cyber Incident Threatens Data Leak

Asos shares fell over 12% on Tuesday after the fashion retailer confirmed that customer data may have been stolen following a cyber incident. Users of the Asos app received a notification stating, "Dear Asos DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it." The company is investigating unauthorized activity involving third-party platforms used for customer communication.

Asos stated that while customer names and contact details may have been accessed, it does not believe that payment information or passwords were compromised. The website and app are reportedly operating normally with no disruption to operations.

This incident occurs at a challenging time for Asos, which has faced difficulties since the pandemic boom due to declining demand, rising costs, and increased competition. The company has been implementing a turnaround plan, including efforts to reduce excess stock and manage returns, which had recently shown signs of success with its shares up significantly this year. Analysts expressed concern that the cyber incident could erode customer trust and impact the firm's recovery.

A String of High-Profile Breaches

Asos joins a list of notable companies, including Marks & Spencer, Jaguar Land Rover, and Harrods, that have experienced cyber attacks in the past year. Experts noted that while the full extent of the Asos breach is still under investigation, it appears to be a "fairly basic data breach" based on current information, potentially differing from more disruptive attacks seen elsewhere.

One analyst suggested that while reputational damage is possible if customers feel less secure, the impact on the brand's recovery might not be material, especially if it does not hinder trading capabilities. Asos has confirmed it has cyber security insurance and is cooperating with relevant authorities.