ASOS says personal details may have been exposed after impersonation breach and fake app alert

A malicious actor impersonated a trusted contact to obtain login credentials to an employee account, gaining entry to third‑party platforms used by ASOS. The intrusion could have permitted access to customers’ names and contact information, though payment card numbers and passwords are believed to be safe. The breach came to light after a fraudulent push notification referencing Snowflake appeared in the ASOS mobile app, leading the company to block the notification service and start an investigation with internal and external security advisers and regulators.

Snowflake has said its platform shows no signs of compromise. ASOS has warned customers to disregard unexpected calls or messages and said its website and app remain functional. The episode has coincided with a share‑price drop of more than 10%.