Why was Asos hacked and who did it? – The Independent

Why was Asos hacked and who did it?  The Independent

Customers have received little information about the cyber attack – but there are some important steps they can take Want to bookmark your favourite articles and stories to read or reference later? Start your Independent Membership today. The Independent Security channel is brought to you by Bitdefender Asos customers have received an alarming notification on their phones – and very little information about what happened and what they should do next. On Tuesday, the online clothing retailer’s app sent a threatening notification to a huge number of users. It appeared to be the result of a cyber attack that allowed hackers access to at least some of Asos’s systems. But it still remains unclear precisely what happened.

Despite that, however, there are plenty of important steps that customers can take. Here’s everything we know about the hack, and what worried customers should do next. Shortly before 10am on Tuesday, Asos customers received a threatening notification through the app. “ASOS HACKED,” it began. “Dear Asos DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it.” The hackers linked out to a Telegram account, which identified them as “Xuanye Group”, a name that has not been used before. In that group, the hackers made no specific demand and perhaps surprisingly seemed to advise users