Shares in Asos, a leading fashion retailer, fell nearly 10% following reports of unauthorized access to its app systems by an unidentified third party. Customers received notifications claiming that hackers had "fully compromised" their data.
Investigation Underway
Asos is currently investigating the unauthorized access, stating that basic personal information, including names and contact details, may have been accessed. However, the company believes that payment card records and passwords remain secure. In a statement, Asos said:
“"We are investigating unauthorised activity involving third-party platforms that we use to communicate with customers. We took immediate action to restrict access to the notification platforms and are working with our internal and external specialist advisers, as well as all relevant authorities."
The company reassured customers that its website and app are operating normally, emphasizing the importance of customer trust. They added:
“"If the situation changes, an update will be provided as appropriate."
Customer Notifications
Asos later issued an apology to customers, stating:
“"We’re sorry that you may have received an unauthorised push notification from us earlier today. Please disregard the notification and do not click or engage with the external third-party link it contained."
The value of Asos’s shares on the London Stock Exchange dropped more than 14% after thousands of customers received a notification titled "Asos hacked," which included a link directing them to the Telegram messaging service. Shares closed down by 9.56% after the announcement that Asos has cybersecurity insurance with a large global provider, including business continuity insurance. However, the company noted:
