ASOS Hit by Data Breach Following Employee Account Compromise and Rogue Push Notifications

Online retailer ASOS disclosed that threat actors compromised an employee account through social engineering techniques. The attackers subsequently abused multi-factor authentication by triggering rogue push notifications to gain unauthorized access. This breach exposed personal details such as names and contact information, alongside account-related data. External experts assisted in investigating and containing the security incident.