British online retailer ASOS has confirmed that hackers compromised a third-party communication platform after users received rogue notifications on their phones.
Over the past couple of days, numerous ASOS users in the UK complained about receiving a pop-up notification on their mobile apps, titled “ASOS hacked”.
“Dear ASOS DPO [data protection officer] and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it,” the notification read.
In a Tuesday filing with the London Stock Exchange, the clothing and cosmetics retailer confirmed that its users received unauthorized notifications after a third-party platform used for customer communication was hacked.
“We took immediate action to restrict access to the notification platforms and are working with our internal and external specialist advisers, as well as all relevant authorities,” ASOS said.
According to the company, the hackers might have accessed basic user information, including names and contact details.
“We do not believe that payment-card information or account passwords were impacted,” the company said.