ASOS customers received a push notification through the retailer's app claiming the company had been hacked, and the message threatened to leak data unless the company engaged with the attackers. Screenshots show the alert said ASOS's Snowflake instance was fully compromised and linked to a Telegram channel calling itself Xuanye Group, but the article says no evidence of data theft was provided. If authentic, the incident would at minimum indicate unauthorized access to ASOS customer-messaging infrastructure.
Why it matters: ASOS customers and investors may be affected even before the full scope is known, because attacker control of an official app channel can be used for extortion, panic, or follow-on phishing. ASOS users should treat any unusual in-app or linked messages cautiously, and the company needs to verify whether its notification systems or Snowflake-connected environment were accessed.
Ionut Arghire
2026.10.07
96% relevant
This source confirms the previously reported incident as a real cyberattack and data breach, adds that a third-party customer-communication platform was compromised, says basic user data such as names and contact details may have been accessed, and notes ASOS does not currently believe payment card data or passwords were affected.
2026.10.06
100% relevant
This article appears to be the first report of the apparent ASOS intrusion/extortion claim and establishes the event through the unauthorized push notification and linked Telegram demand.
← Back to all stories