Archive — US — techcrunch
Asos confirms breach of customer data after hackers send rogue app notification
Asos confirmed a data breach where hackers exploited its app to notify customers about compromised personal information. Names, contact info, and profile details were stolen from a third-party platform, with hackers demanding engagement to prevent data leaks. This incident raises concerns about data security practices for companies using external services.
Key points
- Asos experienced a data breach due to hackers exploiting its own app.
- Hackers accessed customer data including names, home addresses, phone numbers, and email addresses.
- They compromised a third-party platform (Snowflake) to send unauthorized notifications to customers.
- The notification indicated a full data compromise and threatened data leaks if Asos does not engage.
- The hackers used impersonation to obtain login credentials, raising questions about Asos' security measures.
Why it matters
- The incident underscores the growing trend of cyberattacks targeting third-party service providers, similar to the Betterment breach earlier in the year.
- As businesses increasingly rely on external platforms for customer engagement, data security and multi-factor authentication remain critical issues.
- This breach highlights the importance of safeguarding customer data in the context of the rising challenges of data privacy and cyber threats in 2025.
The Asos data breach exemplifies the vulnerabilities companies face when relying on third-party services, emphasizing the need for robust security measures and awareness of potential cyber threats.