Understand
Asos app users receive unauthorised push notifications from apparent hackers
Overview
Asos app users across the UK received an unauthorised push notification on Tuesday from apparent hackers attempting to extort the company. Asos advised customers to disregard the message and not click on the included link. While it remains unclear what data has been accessed, Asos stated that basic personal information may be involved, though payment-card details and account passwords are not believed to be impacted. Experts advise users not to click links, to change passwords, enable two-step verification, and remain vigilant against potential follow-up scams.
Key points
- Asos app users received a pop-up message on Tuesday appearing to come from hackers threatening to leak data.
- Asos emailed customers apologising for the unauthorised notification and advised them not to click the external link.
- The retailer stated that basic personal information like names and contact details may be involved, but payment-card information and passwords are not believed to be impacted.
- Data storage company Snowflake reported no compromise of its platform.
- Users are advised to change passwords, enable two-step verification, monitor transactions, and be suspicious of potential follow-up phishing attempts.