I received the push notification via the app this morning as well. Extremely bizarre and not how normally one finds out about a company getting hacked.
I've seen comments from people claiming they used to work at Asos saying that they have a Braze/Snowflake integration, and the push notification was sent from Braze
As far as I know, the Braze/Snowflake integration is just to pull contact data and event feeds into Braze and to sync out performance data.
If they’ve gained access to Braze presumably they’ll have access to the contact db stored in there along with whatever other information is pushed in to support segmentation and personalisation but it’s definitely limited in scope vs just gaining access to their snowflake db.
This assumes they implemented things sanely with the db user for Braze having limited access rights…
Or they are lying about having snowflake access and only actually have Braze
Lots of fun possibilities!
If they’ve gained access to Braze presumably they’ll have access to the contact db stored in there along with whatever other information is pushed in to support segmentation and personalisation but it’s definitely limited in scope vs just gaining access to their snowflake db.
This assumes they implemented things sanely with the db user for Braze having limited access rights…