ASOS has confirmed it suffered a data breach after customers in Australia received an unauthorised mobile notification threatening to leak information.
The company said hackers may have accessed “basic personal information”, but it did not believe payment card details or passwords had been affected.
The notification, sent at about 8pm Australian Eastern Standard Time, was addressed to ASOS’s data protection and IT teams. It read: “Dear ASOS DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it.”
Snowflake is a cloud-based data platform used by businesses to store information. An instance is a dedicated private environment containing a company’s data, operations and internal processes.
ASOS said it had taken immediate action to restrict access to the notification platforms and was working with internal and external specialist advisers, as well as the relevant authorities.
