Twilio
Cloud communications company that also runs the Authy two-factor authentication app.
The rogue alert pushed through ASOS's app on 6 October 2026, after a staff member was tricked out of a login, echoed Twilio's 2022 breach, when texts to employees led to 209 customer accounts and 93 Authy users being affected.
Last refreshed: 12 October 2026
How did text messages to staff open Twilio's internal tools?
Timeline for Twilio
Mentioned in: ASOS app pushes rogue alert to customers
Cybersecurity: Threats and DefencesBackground
Twilio is a cloud communications company serving more than 270,000 customers. Twilio also runs Authy, a two-factor authentication app with roughly 75 million users, figures from its own 2022 incident report.
That incident began in mid-July 2022, when attackers sent text messages to current and former Twilio employees while posing as IT staff. The links led to counterfeit Okta sign-in pages. Some employees typed in their credentials, handing the intruders access to internal tools. Twilio discovered the breach on 4 August, and its final report of 27 October 2022 put the damage at 209 customer accounts and 93 Authy users.
Researchers called the broader phishing campaign 0ktapus. Twilio's case is the reference point for the ASOS incident of 6 October 2026, in which a tricked employee's login let attackers send a rogue alert to shoppers.