ASOS App Users Receive Hacktivist Extortion Message
A message claiming a data breach appeared on the phones of numerous ASOS customers, referencing a compromise of the Snowflake instance.
Users of the ASOS app have reported receiving pop-up notifications on their phones that appear to originate from hackers attempting to extort the company. The messages, observed by dozens of individuals across the UK, directly address the clothing and beauty retailer's data protection officer and IT team.
The notification states, "Dear ASOS DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it." This message points to a potential breach involving Snowflake, a company whose services are utilized by numerous firms for data collection, analysis, and storage.
It remains unclear if ASOS is a customer of Snowflake or what specific data, if any, might be affected. Snowflake has been associated with several high-profile data breaches in recent years, including incidents linked to Ticketmaster and Santander. Social media platforms have seen numerous user posts detailing the confusing and alarming messages received through the ASOS app.