[CLSTR]
< Back to all clusters
[TECHNOLOGY] · United Kingdom, France · 6 sources

started · updated

Part of situation: ASOS customer data breach and app notification hijack (3 clusters)

Asos confirms data breach after hackers use mobile app for extortion

Asos data breach Xuanye Group cybersecurity customer data theft Snowflake

Online fashion retailer Asos has experienced a significant data breach after cybercriminals used the company's official mobile app to send unauthorized pop-up notifications to users. The hacking group, identifying as Xuanye Group (or Xuanyewen), claims to have gained access by impersonating trusted contacts to obtain an employee's login credentials.

While Asos has stated that payment details and passwords were not compromised, the company confirmed that basic personal information may have been accessed. This includes customer names, addresses, phone numbers, email addresses, customer identification numbers, and dates of birth. Additionally, hackers reportedly obtained access to browsing history and website search terms.

Asos indicated the breach occurred through Simon AI, a platform built on top of the Snowflake data storage service. Snowflake has stated it has not identified any compromise to its own platform.

Following the incident, the Xuanye Group has also claimed responsibility for a separate data breach at Air France-KLM, involving unauthorized access to internal folders containing files related to current and former employees.

Entities

ASOS · Air France-KLM · BBC News · Snowflake · Xuanye · Xuanye group

Claims

What the coverage asserts, and how many sources carry each claim.

  • [○ 1 SOURCE] The Xuanye Group claims responsibility for a data breach at Air France-KLM involving internal folders. www.cityam.com
  • [○ 1 SOURCE] The hacking group, identified as Xuanyewen, claims they gained access by impersonating trusted contacts to obtain an employee's login credentials. rocketnews.com
  • [● 3 SOURCES] Asos confirmed that basic personal information, including names and contact details, may have been accessed. rocketnews.com · www.thecooldown.com · www.zataz.com
  • [○ 1 SOURCE] Hackers obtained access to customer browsing history and website search terms. rocketnews.com
  • [● 3 SOURCES] Asos stated that account passwords and payment details were not accessed during the incident. rocketnews.com · www.thecooldown.com · www.zataz.com
  • [○ 1 SOURCE] The unauthorized access occurred through a platform called Simon AI, which is built on top of Snowflake. rocketnews.com
  • [○ 1 SOURCE] Compromised data includes names, addresses, phone numbers, email addresses, customer IDs, and dates of birth. rocketnews.com
  • [○ 1 SOURCE] Snowflake reported that it has not identified any compromise of its own platform. www.zataz.com

Sources

Des cybercriminels ont utilisé l’application ASOS contre l'enseigne [www.lesclesdudigital.fr]
Asos hackers took more personal details than first revealed, BBC finds [rocketnews.com]
ASOS users stunned after receiving chilling 'hack' notification appearing to threaten app owners | #hacker - National Cyber Security Consulting [nationalcybersecurity.com]
Asos users told to reset passwords after app alert, retailer probes data exposure [www.thecooldown.com]
ASOS : une menace de fuite envoyée aux clients [www.zataz.com]
Asos hackers claim responsibility for Air France-KLM data breach [www.cityam.com]