As noted by The Register, customers of the online clothing retailer Asos reported receiving a suspicious app notification. The notification claimed that the company's Snowflake instance was compromised and threatened to leak sensitive customer data.
The notification, which included a link to a Telegram channel, was addressed to Asos's data protection officer and IT team, stating, "Engage with us, or we will leak it." While the message does not confirm a breach, Asos's share price saw a significant drop of approximately 12% following the reports, though it has since recovered slightly. This incident follows a major data theft campaign targeting Snowflake customers in 2024, which affected numerous organizations. In response to such threats, Snowflake has since introduced controls requiring multi-factor authentication for administrators. The method by which the notification was sent and whether any actual data was accessed remains unclear, pending comments from Asos and Snowflake.
Source: The Register
