Company

ASOS

UK-based online fashion and beauty retailer that sells through its website and mobile app.

Known aliases

Asos
ASOS plc

Current stories

product14 publishersConfirmed

Extortion note meant for ASOS's IT team lands on customers' phones through the retailer's app

Apparent hackers sent an extortion note through ASOS's app to UK customers, claiming to have "fully compromised" its Snowflake instance. ASOS has not confirmed a breach, so the only compromise anyone has seen is that outsiders could message its app users.

Publishers:bbc.co.ukbusinessinsider.comchannelnewsasia.comcityam.comdexerto.comengadget.comitpro.commashable.comqz.comsiliconrepublic.comtechradar.comtheguardian.comthenextweb.comthepaypers.com

Perspective Coverage

13 publishers

Builder: Builder 16%
Operator: Operator 61%
Investor: Investor 23%

Reality

Evidence72
Adoption: Insufficient
Hype gap−10
Incentives60
Confidence68

leadership1 publisherOne report

Asos widens its breach disclosure after hackers share a data sample with the BBC

Asos says hackers took detailed profiles of potentially millions of customers, after first telling investors only basic contact details may have been accessed. The revision followed the attackers' approach to the BBC, so the people holding the records set the timing of the fuller disclosure.

Publishers:bbc.co.uk

Reality

Evidence60
Adoption: Insufficient
Hype gap+5
Incentives65
Confidence55

security11 publishersConfirmed

Extortionists send a Snowflake leak threat through ASOS's own app notifications

Extortionists sent ASOS app users an apparently genuine ASOS push alert on October 6 claiming they had fully compromised the retailer's Snowflake instance. The alert is the only access anyone outside ASOS has seen; the entry route and any data taken are unknown.

Publishers:bbc.combleepingcomputer.comblog.rapid7.comcyberinsider.comhelpnetsecurity.cominfosecurity-magazine.commalwarebytes.commetacurity.comscworld.comsecurityweek.comtherecord.media

Perspective Coverage

11 publishers

Builder: Builder 26%
Operator: Operator 52%
Investor: Investor 22%

Reality

Evidence55
Adoption: Insufficient
Hype gap+35
Incentives65
Confidence60

security1 publisherOne report

Group-IB traces ASOS's rogue push alert to a renamed gaming-trade Telegram account

Group-IB found the Telegram channel in ASOS's October 6 rogue push alert was opened that day by an account once used for gaming-item trading. Until data surfaces, the Snowflake claim is unproven and the abused messaging platform is the lead to work.

Publishers:infosecurity-magazine.com

Reality

Evidence55
Adoption: Insufficient
Hype gap+20
Incentives45
Confidence50

leadership1 publisherOne report

Hackers delivered their Asos extortion demand through the retailer's own app

Hackers used the Asos app on Tuesday to send UK users an extortion demand claiming they had compromised the retailer's Snowflake instance. Because the demand went to shoppers, the attackers decided when Asos had to speak to customers, before it could say what data, if any, was taken.

Publishers:bbc.co.uk

Reality

Evidence45
Adoption: Insufficient
Hype gap+5
Incentives65
Confidence40