7IT · News

Hackers used Asos's own app to announce the breach. Your push channel is a key too.

By Lior AharonovFounder, 7IT Solutions ·

What happened

UK retailer Asos has confirmed a breach of customer data, TechCrunch reported on Thursday 8 October 2026, after hackers sent users an in-app notification claiming its data on Snowflake was compromised. Asos told the London Stock Exchange that hackers broke into a third-party platform it uses to contact customers, and says names and contact details were taken. Snowflake says its own systems were not breached.

Why it matters

Your push service is a megaphone into your customers' pockets. Whoever holds its keys speaks in your name. TechCrunch reports it is still unclear how the attackers reached the Asos push system, which is often run by a third party.

What to do

List every third-party tool that can message your users, from push to email and SMS, and who holds its credentials. Turn on MFA for each one and for your data warehouse logins today, and rotate shared keys.

Your send button is as valuable as your database. Guard it like one.

Lior Aharonov · my take

Sources

securitybreachmobilepush-notificationssnowflake

Researched with AI tools; every fact is checked against the linked sources.

All 7IT news · Atom feed

Need a hand with something like this? Talk to 7IT.