Ethical Hacking News
Asos, a popular online clothing retailer, has faced a data leak threat through a rogue notification sent to its customers, claiming that its Snowflake instance had been compromised. The incident highlights the ongoing threat of data breaches and the need for companies to have robust security measures in place to protect their customers' sensitive information. While the notification did not provide concrete evidence of the alleged breach, it sent shockwaves through the company's share price, highlighting the potential consequences of such threats.
Asos received a data leak threat via a rogue notification in its app, claiming its Snowflake instance had been compromised.The notification led to a 12% drop in Asos's share price and raised concerns about the company's security.The notification was addressed to Asos's data protection officer and IT team, and seemed to be an attempt to extort money from the company.Snowflake, a cloud platform, has previously been targeted in a major data theft campaign, highlighting the ongoing threat of data breaches.The incident emphasizes the need for companies to have robust security measures in place to protect customer data.The incident raises questions about the effectiveness of cybersecurity measures and regulatory bodies' role in protecting consumers' data.
Asos, a popular online clothing retailer, has recently faced a data leak threat through a rogue notification sent to its customers. The notification, which appeared in the Asos app, claimed that the company's Snowflake instance had been compromised and threatened to leak sensitive customer data unless certain demands were met. While the notification did not provide any concrete evidence of the alleged breach, it sent shockwaves through the company's share price, which dropped by around 12 percent in response.
The notification, which included a link to a Telegram channel named "Xuanye Wen Gateway," was addressed to Asos's data protection officer and IT team, and seemed to be an attempt to extort money from the company. However, it is worth noting that the notification did not, by itself, establish that the sender accessed Asos's Snowflake instance or sensitive customer data. How the message was sent remains unclear.
Snowflake, a cloud platform for storing and analyzing data, has previously been targeted in a major data theft campaign in 2024, which affected dozens of organizations, including Ticketmaster, Santander, AT&T, and others. In response to these threats, Snowflake introduced controls allowing administrators to require multi-factor authentication for its instances.
This incident highlights the ongoing threat of data breaches and the need for companies like Asos to have robust security measures in place to protect their customers' sensitive information. It also underscores the importance of vigilance in the face of cyber threats, as a single notification can have far-reaching consequences.
The incident also raises questions about the effectiveness of cybersecurity measures and the role of regulatory bodies in protecting consumers' data. As the use of cloud services continues to grow, it is essential that companies like Asos take proactive steps to ensure the security of their data and that regulatory bodies are equipped to enforce the necessary safeguards.
In conclusion, the recent data leak threat sent to Asos customers is a stark reminder of the ongoing threat of cyber attacks and the need for companies to have robust security measures in place. As the use of cloud services continues to grow, it is essential that companies like Asos take proactive steps to ensure the security of their data and that regulatory bodies are equipped to enforce the necessary safeguards.
Related Information:
https://www.ethicalhackingnews.com/articles/Asos-App-Delivers-a-Data-Leak-Threat-A-Case-of-Rogue-Notifications-and-Cloud-Security-Vulnerabilities-ehn.shtml
https://www.theregister.com/security/2026/10/06/asos-app-delivers-a-data-leak-threat-instead-of-fast-fashion/5301332
Published: Tue Oct 6 07:57:24 2026 by llama3.2 3B Q4_K_M
