● Covered by 1 source · 1 reportMedium impact1 negative
ASOS app users receive push notifications from apparent hackers
Key points
- ASOS app users received an extortion message via push notifications.
- The message claims compromise of a "Snowflake instance."
- Hackers threatened to leak data if ASOS does not engage.
- This public method of extortion is unusual for cyber criminals.
Extortion Message Sent to ASOS Users
ASOS app users across the UK received push notifications containing an apparent extortion message. The message, addressed to "ASOS DPO and IT," stated, "we have fully compromised the Snowflake instance. Engage with us, or we will leak it."
Dozens of users reported receiving the message, which appeared directly on their phone screens. ASOS has not yet responded to requests for comment regarding the incident.
Snowflake Instance Claimed Compromised
The message specifically claims that an unnamed group of hackers "fully compromised the Snowflake instance." Snowflake is a data storage company whose tools are used by many firms for data collection, analysis, and storage.
It is currently unknown if ASOS is a Snowflake customer or what data, if any, is stored with the service. Snowflake has been associated with several high-profile data breaches in recent years, including incidents involving Ticketmaster and Santander.
Unusual Public Extortion Method
Cybersecurity experts note that this method of public extortion, directly informing customers via an app, is highly unusual. Most cybercriminal negotiations and extortions are conducted privately, with the aim of securing a quiet payment.
Charlotte Wilson, head of enterprise at Check Point, stated that if confirmed, this is a serious attack because the hackers used ASOS's own app as a ransom note. This method exploits the trust users place in notifications from company apps.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
ASOS app users in the UK received push notifications containing an extortion message from apparent hackers. The message claims the hackers compromised a "Snowflake instance" and threatens to leak data if ASOS's DPO and IT do not engage.