Asos Probes Cloud Incident After Extortion Push Notification Reaches Customer Phones

U.K. online fashion retailer Asos is investigating unauthorized activity across third-party communication platforms after attackers used the company's notification channels to broadcast an extortion demand directly to shoppers' phones, according to a report by Engadget (https://www.engadget.com/2279150/asos-hit-by-extortion-hack-that-may-have-compromised-some-customer-data/).

The incident came to light after users of the retailer's mobile app received push notifications addressed to the company's data protection officer and IT staff. The messages read: "Dear Asos DPO and IT, we have fully compromised the Snowflake instance. Engage with us or we will leak it."

The notification contained a link directing users to a Telegram channel claiming to be run by "Xuanye Group," a name unfamiliar to most cybersecurity researchers.

In an official statement, Asos said it is investigating unauthorized activity involving third-party customer communication platforms and took immediate action to cut off access to the affected systems. The retailer stated it is working alongside internal and external technical advisers as well as relevant regulatory and law enforcement authorities.

Asos disclosed that while customer names and contact information may have been accessed during the intrusion, it does not believe passwords or payment card details were compromised. The retailer noted that its website and mobile app continue to operate normally.