ASOS app ransom-note cyber incident

Description ASOS is investigating a cyber incident after an unauthorized app ransom note was followed by disclosures that customer information was accessed. Overview On Oct 6, ASOS customers received app pop-ups titled “ASOS HACKED” that claimed a Snowflake instance had been compromised. The message threatened to leak data unless ASOS engaged with the attackers, and the company said it was investigating activity involving third-party customer-communication platforms. ASOS later said employee credentials were used to access customer names and contact details, with later reporting saying search histories, addresses, phone numbers, emails and account numbers were also stolen. Why it matters The incident affects ASOS customers, the retailer’s data-protection response and investors weighing any trading, reputational or regulatory consequences. Key details • ASOS said no payment card data or account passwords were compromised. • The company restricted access to the notification platforms. • ASOS shares fell more than 10% after the reports. • The app message was addressed to ASOS’s IT team and data protection officer.