On Tuesday morning, ASOS mobile app users were met with an alarming notification declaring 'ASOS HACKED' across their screens. The message, seemingly authored by cyber attackers, explicitly warned, 'Dear Asos DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it,' and directed recipients toward a Telegram chat link.
This security incident impacts the millions of customers who rely on the ASOS platform, with reports of widespread distribution via push notifications. The mention of a compromised Snowflake instance suggests a significant breach of the online data platform used by the retailer. For users, the notification highlights a potential risk to the personal information overseen by the company's data protection officer.
According to The Independent and LADbible, the incident began manifesting around 9:41am, coinciding with a surge of user reports on DownDetector regarding functionality issues. While ASOS has yet to issue an official statement or address the breach on social media, the market reacted swiftly to the news. As reported by The Independent, the company's share price plummeted by approximately 5 per cent in the immediate aftermath of the notifications being sent.
Under UK law, British companies are mandated to report data breaches to officials within a three-day window. Regulations further require that businesses notify affected individuals promptly if a cyber attack presents a high risk to their data. Customers are now awaiting official guidance from ASOS as authorities determine the extent of the alleged compromise.