[CLSTR]
< Back to all clusters
[TECHNOLOGY] · United Kingdom · 18 sources

started · updated

Part of situation: ASOS customer data breach and app notification hijack (3 clusters)

ASOS confirms customer data breach following cyberattack

ASOS cyberattack data breach social engineering Xuanye Group

British fashion retailer ASOS has confirmed a significant data breach following a cyberattack that targeted customer information. The breach occurred after hackers, identifying themselves as the Xuanye Group, used social engineering to impersonate a trusted contact and obtain the login credentials of an ASOS employee. These credentials were then used to access data held on certain third-party platforms.

According to ASOS and subsequent investigations, the compromised data includes customer names, home addresses, phone numbers, and email addresses. Reports from the BBC indicate that the breach also exposed customer search histories, revealing specific shopping interests. ASOS has emphasized that payment card information and account passwords were not accessed during the incident.

The attack gained public attention when hackers sent unauthorized push notifications directly through the ASOS mobile app, claiming the company’s Snowflake-hosted data was “fully compromised” and threatening to leak the information unless negotiations began. Snowflake has since issued a statement clarifying that its own systems were not breached and that the issue did not stem from a vulnerability in its platform.

ASOS has locked down the affected third-party platforms, launched a full investigation with cybersecurity experts, and is cooperating with law enforcement and regulatory authorities, including the UK Information Commissioner’s Office. The company's shares experienced significant volatility following the disclosure, at one point dropping over 12% before partially recovering.

Entities

ASOS · London Stock Exchange · Snowflake · UK Information Commissioner’s Office · Xuanye group

Claims

What the coverage asserts, and how many sources carry each claim.

Sources

ZiarulNational. md ultimele știri din Moldova [www.ziarulnational.md]
'Snowflake' firm in ASOS hacking message issues response | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker - National Cyber Security Consulting [nationalcybersecurity.com]
Customer data accessed in breach, ASOS confirms [www.nationaltechnology.co.uk]
Atacul cibernetic asupra Asos, mai grav decât se credea: ce date au ajuns pe mâna hackerilor [stiintasitehnica.com]
ASOS hack exposed what millions of customers were searching for. Here’s what we know [www.easterneye.biz]
I clienti di ASOS ricevono una notifica per un presunto attacco informatico [www.ilcorrieredellasicurezza.it]
Persoonsgegevens buitgemaakt bij cyberaanval kledingsite ASOS [www.rd.nl]
Επίθεση χάκερ στην ASOS με μηνύματα απευθείας στους πελάτες [www.economistas.gr]
Editor’s comment: Asos nightmare hack puts cyber-security back in the spotlight [www.drapersonline.com]
ASOS breach update: Hackers stole customer details and shopping searches [www.malwarebytes.com]
Hackers Tricked Asos Employee to Steal Work Account Login [www.claimsjournal.com]
UK’s ASOS says cyber hack accessed customers’ personal data [www.businessinsurance.com]
ASOS Customers Warned after Hacking Message [www.desiblitz.com]
You may be entitled to financial compensation if you got the ASOS 'hack' notification [www.ladbible.com]
ASOS revela cómo accedieron los hackers a datos de clientes [www.20minutos.es]
Asos cyber breach not caused by vulnerability in our platform, says Snowflake [www.independent.co.uk]
Asos confirms breach of customer data after hackers send rogue app notification [techcrunch.com]
Asos says customer data accessed by hacker posing as trusted contact [www.theguardian.com]