Hackers hijacked ASOS app to push extortion threat to customers

Attackers identifying as Xuanye Group sent an "unauthorised customer notification" via ASOS's app stating ASOS data hosted on Snowflake was "fully compromised." The message, addressed to ASOS's data protection officer and IT department, reads "Engage with us, or we will leak it." ASOS confirmed the Oct. 6 notification on Oct. 8.