What you can do to protect yourself after Asos hacking message

If a strange-looking message from Asos popped up on your phone on Tuesday, you may be worrying what it could mean and whether you need to do anything.

The online retailer has emailed customers apologising for the "unauthorised push notification" containing an external link, adding that they should disregard the message and not click on it.

Here's what has happened, and what those who may have been affected are being advised to do.

On Tuesday morning, Asos users across the UK were sent pop-up messages from its app that appear to have been sent by hackers trying to extort the company.

"Dear ASOS DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it," the message read.

Later that day, Asos said it took immediate action to restrict the apparent hackers' access, was investigating and working with advisers and relevant authorities on "next steps".

Data storage company Snowflake told the BBC its investigations had "found no compromise" of its platform.

At this stage it isn't clear what information, if any, has been accessed.

On Tuesday evening, Asos told customers it may include "basic personal information including name and contact details".

"However, we don't believe that any payment-card information or account passwords have been impacted," it added.

While those who received the pop-up message will undoubtedly be concerned, it does not mean your phone has been hacked.

According to Charlotte Wilson, head of enterprise at global cyber-security firm Check Point, "the biggest immediate risk may be what happens next".

She says criminals know people will be searching for information online and expects there to be "attempts to exploit that confusion".

Her advice to Asos customers is not to be "scared and frightened". But she says they should be "extremely suspicious" of emails, texts or messages claiming their account has been compromised, offering a refund or asking them to click a link to reset their password.

People should hang up the phone if they receive any calls from someone they think might be posing as Asos or another organisation, says Which? spokesperson Kat Cereda.

The consumer rights expert says they should contact the organisation themselves afterwards through separate means.