Tech

ASOS app users receive notifications from hackers in apparent breach

Dozens of people appear to have received a strange message from the clothing and beauty store's app.

ASOS app users receive notifications from hackers in apparent breach

ASOS users across the UK have been sent pop-up messages through its app that appear to have come from hackers attempting to extort the company.

Dozens of people told the BBC they received an unusual message from the clothing and beauty retailer’s app, which appeared on their phone screens.

"Dear ASOS DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it," the message reads.

ASOS did not immediately reply to the BBC’s requests for comment.

On social media, dozens of people have posted about getting the message, saying they were confused about what it means.

Although the apparent extortion note was delivered directly to customers, it is addressed to ASOS’ data protection officer (DPO) and IT team.

The message says the unnamed hackers have "fully compromised the Snowflake instance".

It also mentions the data storage company Snowflake, whose widely used tools have been used by dozens of firms to collect, analyse and store data.

It is not known whether ASOS is a Snowflake customer or what data, if any, is held with the service.

However, Snowflake has been involved in many high-profile data breaches in recent years and has been linked to incidents affecting services including Ticketmaster and Santander.

Cookies on xabarchi

We use cookies to remember your language and theme, and to count how many people are reading right now — that count is anonymous, lasts only while your browser is open, and cannot be tied to you or to another visit. With your permission we also measure how the site is read: Microsoft Clarity, which records page views and on-page interactions, and our own count of returning readers. Nothing that recognises you across visits is measured until you accept.