Push‑notification extortion via SaaS platforms

Attackers can abuse third‑party notification or analytics services integrated into popular apps to deliver alarming, actionable messages (for example, 'ASOS HACKED' linking to a Telegram extortion channel) without compromising app code or payment systems. Such incidents can expose basic personal data, create mass panic, and bypass traditional breach channels, while complicating breach disclosure and regulatory oversight. — This pattern amplifies the public‑policy stakes of SaaS supply chains, demanding new disclosure rules, vendor‑security standards, and consumer guidance because push channels reach millions instantly and can be weaponized for extortion or misinformation.