Asos App Users Receive 'Hacked' Notification

Online fashion retailer Asos has alerted customers to an unauthorized push notification sent from its app, which appeared to be a hack attempt. The message, which began appearing on users' phones on Tuesday morning, read: "Dear ASOS DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it." Asos stated that it took immediate action to restrict the apparent hackers' access, is investigating the incident, and is working with advisers and relevant authorities. Data storage company Snowflake, mentioned in the notification, told the BBC that its investigations had found no compromise of its platform.

Potential Data Impact

Asos has informed customers that the incident may have involved basic personal information, including names and contact details. However, the company added that it does not believe payment card information or account passwords have been impacted. While users who received the pop-up message may be concerned, Asos clarified that it does not mean their phones have been hacked.

Recommendations for Customers

For customers who received the notification, the advice is to avoid clicking on the link included in the message, which directs to a Telegram account. Cybersecurity experts also recommend changing passwords for Asos accounts and any other sites that use the same password. It is advised to use strong, unique passwords and enable two-step verification for important applications, such as banking and email, as a protective measure against cybercriminals.

Customers are also advised to monitor their online transactions for any unusual activity. Cybersecurity experts caution that criminals may try to exploit the confusion following such an incident by sending fraudulent emails or messages. Consumers should be suspicious of any communications claiming their account has been compromised, offering refunds, or asking them to click a link to reset their password. If receiving unsolicited calls, it is recommended to hang up and contact the organization directly through separate channels.

Ongoing Investigation

Asos stated on Tuesday evening that its website and app were operating normally and that customers could continue to shop with confidence. The company emphasized that protecting customers is its priority and that further updates will be provided as more information becomes confirmed. Customers are encouraged to visit Asos's official website directly for the latest information.