ASOS CONFIRMS BREACH OF CUSTOMER DATA AFTER HACKERS SEND ROGUE APP NOTIFICATION

Summary from the TLDR InfoSec newsletter

Asos confirmed a breach after hackers used its app to send customers a notification claiming they had compromised data on Snowflake. Stolen information includes names, contact details, home addresses, phone numbers, and customer-profile notes such as search queries. Attackers reportedly obtained credentials by impersonating a trusted contact. The Xuanye Group is pressuring Asos to negotiate or leak the data.