Asos has said it is investigating “unauthorised activity” involving a third-party platform after customers were sent a phone alert saying the online retailer had been hacked.
The fashion giant, which has 16.5 million customers, said personal informational, such as names and contact details, “may have been accessed” as a result.
However, the company said it does not “believe that payment card information or account passwords, were impacted”.
Customers received a mobile app notification on Tuesday, titled “Asos hacked”, which directed them to a Telegram account.
The message read: “Dear ASOS DPO and IT, we have full compromised the Snowflake instance. Engage with us, or we will leak it,” followed by the Telegram link.
Shares in the company fell by more than 10% on Tuesday as a result.
It is understood that the National Cyber Security Centre (NCSC), a part of GCHQ, has offered Asos assistance.
