0 comments
Clothing retailer ASOS has launched an investigation after some mobile customers received a notification claiming that hackers had ‘fully compromised’ company data.
Some ASOS customers received a push notification on Tuesday claiming that hackers had ‘fully compromised’ company data, The Guardian reports.
The message included a link to Telegram, the largely unmoderated chat service, directing users to a channel supposedly operated by a cyber gang called the ‘Xuayne’ group.
The fashion brand’s website and app are still operational, and ASOS is believed to be determining whether any actual hack has taken place. Share values plummeted by 14% on the London Stock Exchange this morning as a direct result.
‘Dear ASOS DPO and IT,’ the ‘hacker’ message read. ‘We have fully compromised the Snowflake instance. Engage with us, or we will leak it: [redacted Telegram link].’ According to experts, the link could be an attempt to gain wider media traction, as ‘Xuanye’ is currently unheard of.
‘Snowflake is a massive cloud database where retailers typically store customer information,’ explained Dray Agha, senior manager of security operations at Huntress. ‘It is a real worry if cyber criminals have indeed accessed it, as they claim.’
