Asos says hackers sent unauthorised app notification, launches investigation
Asos confirmed an unauthorised notification was pushed to users of its app on Tuesday and is investigating the incident, including possible unauthorised activity involving third‑party platforms.
Online fashion retailer Asos has confirmed that hackers sent an "unauthorised customer notification" to users of its mobile app on Tuesday, after customers raised alarm when the message appeared.
In a statement reported by the BBC, the company described the alert as unauthorised and said it was looking into the matter. The incident prompted concern among app users who reported receiving the unexpected notification.
MyJoyOnline reported that Asos is investigating what it described as "unauthorised activity" involving third‑party platforms it uses. The company has not provided further technical details or said which third‑party services might be involved.
Why this matters
App notifications are a common channel for companies to communicate with customers about orders, promotions and account matters. An unauthorised message that appears to originate from a company's official channel can sow confusion, lead customers to click on malicious links, or undermine trust in the firm's communications.
Asos's prompt confirmation that the notification was unauthorised and its investigation into the cause are both steps companies typically take to manage potential security incidents. At the time of reporting, Asos has not disclosed additional details such as the content of the notification, whether customer data was accessed, or how many users were affected.
What regulators and customers may watch for
Following incidents like this, customers commonly expect updates about any risk to personal data, guidance on whether they should change passwords or take other protective steps, and information about whether any malicious links or attachments were included in the message. Regulators and industry observers may also look for details on how the firm manages access to its app notification systems and the role of any third‑party providers.
Asos has not yet outlined a timetable for its investigation or announced any remedial actions. The company faces the task of restoring customer confidence while determining the full scope and cause of the unauthorised notification.
What we know and what remains unclear
- Confirmed: An unauthorised customer notification was sent via the Asos app on Tuesday, and the company has acknowledged the incident (BBC).
- Investigating: Asos said it is investigating the issue; MyJoyOnline reported the probe includes possible unauthorised activity involving third‑party platforms the retailer uses.
- Unclear: Asos has not published technical details, the content of the notification, whether customer accounts or data were accessed, the number of users affected, or the identity of any third parties involved.
Asos customers should monitor official company communications and their accounts for further updates while the company completes its investigation.
Sources
This story was written from reports by these outlets. Read the originals:
