ASOS confirms breach after hackers abuse mobile app

UK fashion retailer ASOS acknowledged a data breach after unauthorized push notifications were sent via its mobile app. The messages, claiming a compromise of ASOS’s Snowflake environment, directed users to a Telegram channel operated by a group calling itself the ‘Xuanye group.’ ASOS confirmed that basic personal information, such as names and contact details, may have been exposed, but denied that payment-card information or account passwords were impacted. The company has not verified the hackers’ claim of accessing its Snowflake environment or disclosed the number of affected customers.