ASOS confirms breach; hackers claimed access via Snowflake environment

Tue, 06 Oct 2026 17:10:43 +0000

Engineer — Plan: The claimed Snowflake exfiltration vector echoes the 2024 Snowflake credential-theft campaign; if your org uses Snowflake, audit MFA enforcement on all accounts, review session-policy settings, and rotate any credentials that may have been exposed.
SOC/IR — Learn: Unauthorized push notifications via compromised app backend is an interesting abuse path, but no IOCs or TTPs are published here — file as breach context with no immediate detection action available.
Leader — Learn: ASOS is a consumer retailer and unlikely to be a vendor dependency, but the pattern of cloud data-platform compromise (Snowflake) is worth noting for a future review of your own cloud data warehouse security posture.

Snowflake on CuraSec