ASOS confirms data breach after “HACKED” in-app notifications

UK fashion retailer ASOS confirmed a data breach after hackers sent unauthorized push notifications through its mobile app claiming to have stolen customer data. The attackers accessed ASOS's Snowflake cloud environment and used the app's push notification system to alert customers of the breach themselves. The incident highlights ongoing targeting of Snowflake-hosted data environments by threat actors. ASOS is investigating the scope of the breach and what customer data may have been compromised. The use of in-app notifications by the attackers was an unusual method to publicize the breach directly to customers.