Oil prices fall as Trump pauses Iran attacks, China restarts fuel exports

Data storage firm Snowflake has said hack at Asos was not caused by a vulnerability or flaw with its platform.

It comes after Asos’ investigation this week found an “unauthorised party gained access to an Asos employee account by impersonating a trusted to obtain log-in credentials”. Asos said the credentials were then used to access information on third-party platforms used by the company.

But on Friday, Snowflake – a US cloud-based AI data storage business – distanced itself from the incident despite being referenced in the message from the hackers.

(The message had read: “Dear ASOS DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it,” followed by a Telegram link.)

A Snowflake spokeswoman said:

double quotation mark We are aware of Asos’s notification to their customers regarding this incident. We can confirm this issue did not in any way result from a vulnerability, weakness, flaw, or misconfiguration with the Snowflake service, platform, or internal environments, and was not caused by Snowflake. No remediation is required for Snowflake customers. We continue to encourage adherence to our security best practices.

double quotation mark We are aware of Asos’s notification to their customers regarding this incident. We can confirm this issue did not in any way result from a vulnerability, weakness, flaw, or misconfiguration with the Snowflake service, platform, or internal environments, and was not caused by Snowflake.

No remediation is required for Snowflake customers. We continue to encourage adherence to our security best practices.

Asos has stressed that no payment card information or account passwords were accessed. They added the website and app were safe to use:

double quotation mark There is no action you need to take on your account. However, please remain cautious of unexpected messages or calls claiming to be from Asos. We will never ask you to passwords, security codes or payment details through an unsolicited message or call.

double quotation mark There is no action you need to take on your account. However, please remain cautious of unexpected messages or calls claiming to be from Asos. We will never ask you to passwords, security codes or payment details through an unsolicited message or call.