争议事件
以下收录公开来源中与该品牌相关的争议事件。列出一条并不表示过错已经证实。
返回词条共 2 条
2026
ASOS确认客户数据泄露 源于员工登录凭证被盗
问题披露
英国时尚零售商ASOS通知客户，一名威胁行为者在10月6日的数据泄露事件中访问了个人及客户账户数据，并在10月8日的邮件中确认支付信息未被泄露、运营未受影响。ASOS发现攻击者通过冒充可信联系人获取员工登录凭证，并利用该凭证访问了ASOS使用的部分第三方平台上的信息，进而向客户发送了看似合法的推送通知。ASOS在10月6日发给伦敦证券交易所的声明中表示，正在调查用于与客户沟通的第三方平台。Snowflake表示在得知该推送通知后立即展开调查，未发现其平台被入侵；而使用“Xuanyewen”和“Xuanye group”名称的威胁行为者告诉BBC，其入侵了Simon AI实例以获取数据；BBC未说明其收到的数据样本是否经网络安全专家核实。
品牌回应
调查 — ASOS
published on October 6, ASOS said they are investigating third-party platforms which were used to communicate with customers.
持续披露 — ASOS
UK fashion retailer ASOS has notified customers the threat actor had accessed personal and customer account data following the October 6 data breach.
澄清 — ASOS
ASOS also confirmed that payment information was not compromised and that the incident has not affected operations.
调查 — Snowflake
that the company began an investigation as soon as it became aware
来源摘录
published on October 6, ASOS said they are investigating third-party platforms which were used to communicate with customers.
ASOS discovered that the attacker had gained access to an employee account “by impersonating a trusted contact to obtain log in credentials.”
we have found no compromise of the Snowflake platform
2024
客户凭证盗窃和勒索活动
ShinyHunters针对众多Snowflake客户进行了一场涉及窃取凭证、数据盗窃和勒索的活动。据报道，受影响的组织包括Ticketmaster、Santander Bank、Advance Auto Parts、Neiman Marcus、LendingTree、AT&T、Pure Storage和Bausch Health。Snowflake和Mandiant表示，他们的调查未发现Snowflake自身生产环境被入侵的证据，将事件归因于客户凭证受损和账户安全弱点。