ASOS

Asos confirmed an unauthorised party accessed an employee account by impersonating a trusted contact, gaining customer names, contact details and some non-personal account-related information. The company said payment card details and passwords were not compromised, affected platforms were locked down and additional security measures have been applied. Asos is working with law enforcement and regulators, urged customers to ignore unsolicited requests for passwords or payment data and will contact those needing further action. » More on theguardian.com

The British online retailer Asos reported an "unauthorized customer notification" after a suspected cyberattack in which thousands of users in the app received a message titled "Asos hacked." The company is investigating possible access to basic personal information such as names and contact details, but believes payment data and account passwords were not affected. The share price fell by more than ten percent in the morning; operations and the website initially continued to run. » More on heise.de

Asos is investigating after thousands of mobile app users received a push notification claiming the retailer’s Snowflake instance had been “fully compromised” and linking to a Telegram channel run by a group calling itself Xuanye. The company did not confirm a breach while its website and app remained online, but shares fell more than 14% after the messages. Cybersecurity experts warned the notification could signal a breach of customer data or be an attention-seeking hoax and urged customers to beware of follow-up phishing attempts. The National Cyber Security Centre has offered assistance to Asos as the probe continues. » More on theguardian.com