Summary (tl;dr)

Online fashion giant ASOS is investigating a cyberattack after customers globally received push notifications claiming the company's data was "fully compromised," with hackers threatening a leak if ASOS did not engage. ASOS has confirmed unauthorized activity on third-party communication platforms and a potential breach of basic customer information.

Essential Background

ASOS is a prominent British online fashion retailer serving millions of customers across over 100 markets. The company utilizes a cloud-based data platform called Snowflake to manage and store substantial amounts of customer data, including demographic information and transaction details. Snowflake has been targeted by cyberattacks previously, notably in mid-2024, where compromised credentials led to unauthorized access to numerous accounts.

The Full Story

On October 6, 2026, ASOS customers in various countries, including the UK, US, Germany, Australia, and Ireland, received alarming and unauthorized push notifications via the ASOS app. These notifications, titled "ASOS HACKED," were attributed to a hacking collective known as "Xuanye Group" and claimed to have "fully compromised the Snowflake instance," threatening a data leak unless ASOS engaged with them through a provided Telegram link.

ASOS promptly responded by confirming "unauthorised activity involving third-party platforms that we use to communicate with customers" and stated that immediate action was taken to restrict access to these notification systems. While ASOS believes that payment card information and account passwords remain secure, basic personal data such as names and contact details may have been accessed. Despite the incident, the company's website and app are reportedly functioning normally. However, ASOS's shares on the London Stock Exchange experienced a significant drop of up to 14% following the news. The UK's National Cyber Security Centre (NCSC) is providing assistance to ASOS in their ongoing investigation.

Why It Matters

This event is particularly noteworthy due to the attackers' unusual tactic of directly using ASOS's own app to send an extortion demand to its customers, a method described as "brazen" and an "aggressive extortion tactic" by experts. This direct breach of customer communication channels can severely damage trust in the brand and may lead to increased instances of phishing attempts designed to exploit public concern. Although ASOS has indicated that sensitive financial data and passwords were not compromised, the potential exposure of names and contact details raises privacy concerns and heightens the risk for customers to become targets of further scams. The incident also underscores the persistent security challenges faced by companies relying on large cloud data platforms like Snowflake.

Geographic Location

• London, Greater London, United Kingdom (ASOS shares traded on London Stock Exchange; National Cyber Security Centre offering assistance)
• Virtual/Online (Customer notifications sent via ASOS app globally; hackers communicating via Telegram)