ASOS app hijacked to send customer extortion threat

Attackers calling themselves Xuanye Group sent an unauthorised alert through ASOS's app on Oct. 6, claiming customer data held on Snowflake, a cloud storage service, was fully compromised. The message for ASOS privacy and IT staff said contact us or the data would be leaked. ASOS confirmed it on Oct. 8.