Episode Details
Back to EpisodesAsos hack: why marketing tools hold your Snowflake keys
Description
How did hackers send a ransom note through the real Asos app? Reporting points to a conned employee and, per researcher Kevin Beaumont, Simon AI, a composable customer data platform owned by Monetate that reads straight from Snowflake with MFA optional and off by default. That route is unconfirmed. The episode argues the real failure is ownership: marketing bought it, data engineering wired it to the warehouse, and nobody owned the login.
You leave with a concrete audit: list every third-party tool holding warehouse credentials, check whether MFA is enforced or only available, check whether it can message customers, and fix the risky ones with mandatory MFA or single sign-on before Friday.
Key takeaways
- Ask your data engineering lead for a list of every third-party tool that holds credentials into your warehouse.
- For each tool, check whether MFA is enforced or just available, and whether it can also send messages to customers.
- Put any tool that answers optional MFA and can message customers at the top of the list and fix it before Friday.
- Turn on mandatory MFA or put the tool behind single sign-on through your company's identity system.
- Treat MFA as the floor, not the ceiling, since it stops replayed infostealer passwords but is weaker against a live con.
Chapters
0:00 Asos app push notification ransom note
1:55 Social engineering and the Simon AI CDP
3:31 Optional MFA on Snowflake-connected tools
6:17 Why composable CDPs are a data leader problem
7:31 Breach scale, extortion deadline, open questions
8:28 Auditing third-party warehouse credentials this week
Sources
- Asos Hackers Claim Breach of Snowflake-Connected Simon AI
- Asos Shares Plunge Following Public Data Breach Threat
- ASOS breach update: Hackers stole customer details and shopping searches
- Asos confirms breach of customer data after hackers send rogue app notification
- ASOS Breach Reveals the Risks in Customer-Facing SaaS
Full article and transcript: https://www.mba-training.com/blog/asos-breach-simon-ai-mfa
MBA Training, mba-training.com