Asos confirmed an "unauthorised customer notification" was sent out via its app on Tuesday, after users raised alarm.