Reported by 15 outlets
Asos data breached, hackers sent users threatening messages
Why this score
- Breadth
- 2.00 / 2.0 · 15 sources
- Authority
- 1.90 / 2.0 · best outlet weight
- Severity
- 0.70 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.60 / 0.6 · time to second source
- Recency
- × 0.08 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.4 / 10 = base × recency + community
Desk analysis
Attackers pushed a ransom note straight into ASOS customers' hands: on October 6, 2026 the ASOS mobile app delivered a push notification titled "ASOS HACKED", addressed to the company's DPO and IT, reading "we have fully compromised the Snowflake instance. Engage with us, or we will leak it." Thousands of users received it and ASOS shares fell almost 12 percent on the London Stock Exchange. The company confirmed unauthorized access to third-party customer communication platforms, and a group tracked as Xuanye Group claimed responsibility. ASOS later said attackers tricked an employee into handing over login credentials; Snowflake stated its platform was not the vulnerability.
Why it matters: the extortion channel was the retailer's own trusted app, which lends credibility to a claim ASOS has not corroborated. ASOS first described exposure as basic personal information, names and contact details, but a data sample the BBC received from the attackers included home addresses, phone numbers, email addresses, customer numbers, dates of birth, on-site search terms, and customer tenure. Payment-card data and account passwords are believed unaffected. The marketing stack is the suspected vector: ASOS used Simon AI, which runs on Snowflake, alongside Braze to trigger push notifications.
Watch whether ASOS confirms or denies the Snowflake compromise with specifics, the final affected-customer count, and regulator or GDPR follow-up in the UK and EU. The BBC sample showing richer data than first disclosed raises the risk that early reassurances get revised again. Any repeat delivery through the notification pipeline would indicate the intrusion path into the third-party platforms was not fully closed.
Timeline
-
original reporting
Asos data breached, hackers sent users threatening messages
bbc.com · 7d ago · October 6th, 2026
submitted by /u/Cybernews_com [link] [comments]
via reddit r/cybersecurity: Asos data breached, hackers sent users threatening messages
-
update from www.bbc.co.uk
ASOS app users receive notifications from hackers in apparent breach https://www.bbc.co.uk/news/articles/cj62ylzpr6d3o?at_medium=RSS&at_camp
www.bbc.co.uk · 7d ago · October 6th, 2026
ASOS app users receive notifications from hackers in apparent breach https://www.bbc.co.uk/news/articles/cj62ylzpr6d3o?at_medium=RSS&at_camp
via Mastodon https://www.bbc.co.uk/news/articles/cj62ylzpr6d3o?at_medium=RSS&at_campaign=rss
-
update from bbc.co.uk
'ASOS hacked': App users receive notifications apparently sent by hackers — BBC News
bbc.co.uk · 7d ago · October 6th, 2026
BBC News reported on October 6, 2026 that ASOS mobile app users had received a push notification titled "Asos hacked" which claimed full compromise of the retailer's data and contained a threatening link. The article notes the notification reached dozens of users and that ASOS shares on the London Stock Exchange fell almost 12 percent following the reports. Author Joe Tidy covered the story for BBC's technology team.
-
update from www.standard.co.uk
Asos customers told online retailer 'hacked' in phone alert https://www.standard.co.uk/business/business-news/asos-telegram-snowflake-press-
www.standard.co.uk · 7d ago · October 6th, 2026
Asos customers told online retailer 'hacked' in phone alert https://www.standard.co.uk/business/business-news/asos-telegram-snowflake-press-
via Mastodon https://www.standard.co.uk/business/business-news/asos-telegram-snowflake-press-association-b1299703.html
-
mentioned by www.bbc.co.uk
ASOS app users receive push notifications apparently sent by hackers https://www.bbc.co.uk/news/articles/cj62ylzpr6d3o # HackerNews # Tech #
www.bbc.co.uk · 7d ago · October 6th, 2026
-
mentioned by www.theguardian.com
Asos customers receive 'hack' notification threatening leak https://www.theguardian.com/business/2026/oct/06/asos-hack-notification-website-
www.theguardian.com · 7d ago · October 6th, 2026
-
update from www.bbc.co.uk
Asos users receive pop-up notification apparently sent by hackers https://www.bbc.co.uk/news/live/cjkg7205q9ret # HackerNews # Tech # Cybers
www.bbc.co.uk · 7d ago · October 6th, 2026
Asos users receive pop-up notification apparently sent by hackers https://www.bbc.co.uk/news/live/cjkg7205q9ret # HackerNews # Tech # Cybers
via Mastodon https://www.bbc.co.uk/news/live/cjkg7205q9ret
-
mentioned by www.bbc.co.uk
ASOS app users receive push notifications apparently sent by hackers https://www. bbc.co.uk/news/articles/cj62yl zpr6d3o Comments: https://
www.bbc.co.uk · 7d ago · October 6th, 2026
-
update from malware.news
ASOS customers receive ‘hack’ notification threatening leak
malware.news · 7d ago · October 6th, 2026
Sarah Butler reports: ASOS is investigating after users of its mobile app received a notification claiming hackers had “fully compromised” the online fashion retailer’s data. The value of Asos’s shares on the London Stock Exchange dived almost 12% after thousands of customers received a notification titled “Asos hacked” with a link that sent them to… Source Article Link: https://databreaches.net/2026/10/06/asos-customers-receive-hack-notification-threatening-leak/
-
update from malware.news
ASOS “hackers” send push notifications to customers
malware.news · 7d ago · October 6th, 2026
Thousands of global fashion retailer ASOS customers have received a push notification through the ASOS app this morning alleging that the company has been hacked. The notification, addressed to ASOS’s data protection officer and IT, says: “ASOS HACKED Dear Asos DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it” What we know so far Snowflake is a cloud-based data platform that organizations use to store, process, and analyze data. We know that ASOS’s marketing team uses Simon AI from a blog posted by Simon . Simon AI specializes in personalization and runs on Snowflake. ASOS has described using Simon AI alongside Braze to personalize and trigger customer communications like push notifications to clients’ phones. The apparent delivery of the message through ASOS’s own app makes this more concerning than an unsupported social-media claim. It suggests unauthorized use of the notification infrastructure, but does not confirm that the claimed Snowflake compromise occurred or that customer data was stolen. According to Simon AI, typical customer profiles cover: browsing history and products viewed purchase history and customer value (first-time or high-value buyers) demographic data segments such as Premier status or customers who’ve stopped buying geolocation and local weather If the affected systems contain these profiles, a breach could expose a detailed picture of customers’ shopping habits and preferences. However, the published d
-
update from www.standard.co.uk
Asos says customer data may have been accessed after 'unauthorised activity' https://www.standard.co.uk/news/tech/asos-national-cyber-securi
www.standard.co.uk · 7d ago · October 6th, 2026
Asos says customer data may have been accessed after 'unauthorised activity' https://www.standard.co.uk/news/tech/asos-national-cyber-securi
via Mastodon https://www.standard.co.uk/news/tech/asos-national-cyber-security-centre-telegram-snowflake-gchq-b1299768.html
-
update from bleepingcomputer.com
ASOS confirms data breach after “HACKED” in-app notifications
bleepingcomputer.com · 7d ago · October 6th, 2026
ASOS is a large UK-based online fashion retailer that sells clothing, footwear, accessories, and beauty products to customers worldwide, including in the United States. ASOS has confirmed that third-party platforms used to communicate with customers were accessed without authorization and says basic personal information, including names and contact details, may have been exposed. The company is now displaying an in-app notice telling customers to disregard the unauthorized push alert and not to click or engage with the external third-party link it contained. However, the company has not confirmed the threat actor's claim that its Snowflake environment was compromised or disclosed how many customers may be affected. ASOS says it does not believe payment-card information or account passwords were impacted. If you have any information regarding this incident or other undisclosed attacks, you can contact us confidentially via Signal at 646-961-3731 or at tips@bleepingcomputer.com. The notifications began appearing at approximately 5:00 a.m. ET on Tuesday, with multiple BleepingComputer readers contacting us after receiving the alerts on their phones.
-
update from www.bbc.co.uk
ASOS hackers did extortion and forgot the 'extortion in private' part. Xuanye Group: 0/10 for operational security. # Cybersecurity # DataBr
www.bbc.co.uk · 7d ago · October 6th, 2026
ASOS hackers did extortion and forgot the 'extortion in private' part. Xuanye Group: 0/10 for operational security.
-
mentioned by beyondmachines.net
ASOS Investigates Unauthorized App Notifications Following Snowflake Breach Claim ASOS is investigating a possible security incident after a
beyondmachines.net · 7d ago · October 6th, 2026
-
mentioned by www.standard.co.uk
ASOS says customer data may have been accessed after users receive worrying 'hack' alert on phones https://www.standard.co.uk/news/uk/asos-c
www.standard.co.uk · 7d ago · October 6th, 2026
-
mentioned by www.standard.co.uk
Asos apologises to customers after 'unauthorised activity' https://www.standard.co.uk/news/tech/asos-shares-snowflake-telegram-b1299796.html
www.standard.co.uk · 7d ago · October 6th, 2026
-
mentioned by www.bbc.co.uk
What can I do to protect myself after 'Asos hacked' message? https://www.bbc.co.uk/news/articles/ck1l3g8097rzo?at_medium=RSS&at_campaign=rss
www.bbc.co.uk · 7d ago · October 6th, 2026
-
mentioned by www.bbc.co.uk
What can I do to protect myself after 'Asos hacked' message? https://www.bbc.co.uk/news/articles/ck1l3g8097rzo?at_medium=RSS&at_campaign=rss
www.bbc.co.uk · 7d ago · October 6th, 2026
-
update from hackread.com
Hackers hijacked ASOS app notifications to announce the breach themselves. The group claims it compromised ASOS’ Snowflake instance, while t
hackread.com · 7d ago · October 6th, 2026
Hackers hijacked ASOS app notifications to announce the breach themselves.
-
update from www.politico.eu
Read the charter for the White House’s ‘Super Intelligence Force’ https://www.politico.eu/article/document-read-the-charter-for-the-white-ho
www.politico.eu · 7d ago · October 6th, 2026
Read the charter for the White House’s ‘Super Intelligence Force’ https://www.politico.eu/article/document-read-the-charter-for-the-white-ho
via Mastodon https://www.politico.eu/article/document-read-the-charter-for-the-white-houses-super-intelligence-force/?utm_source=RSS_Feed&utm_medium=RSS&utm_campaign=RSS_Syndication
-
update from gbhackers.com
ASOS Hacked as Attackers Abuse Customer Notification Platform to Threaten Data Leak
gbhackers.com · 6d ago · October 7th, 2026
ASOS is investigating unauthorized activity involving third-party customer communication platforms after some shoppers received an alarming app notification suggesting a potential data leak. The attackers claimed to have accessed the retailer’s Snowflake environment, but this allegation remains unverified. Accessing notifications alone does not confirm a database breach. ASOS Hacked The alert reportedly appeared around 10 […] The post ASOS Hacked as Attackers Abuse Customer Notification Platform to Threaten Data Leak appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .
-
mentioned by news.sky.com
ASOS hack https:// news.sky.com/story/asos-latest -customers-told-retailer-has-been-hacked-13591381 # cybersecurity # breach
news.sky.com · 6d ago · October 7th, 2026
-
update from www.techfinitive.com
Hackers delivered an in-app ransom note directly to ASOS customers, claiming a Snowflake compromise. 🚨 Cybersecurity experts analyse the unu
www.techfinitive.com · 6d ago · October 7th, 2026
Hackers delivered an in-app ransom note directly to ASOS customers, claiming a Snowflake compromise. 🚨 Cybersecurity experts analyse the unu
via Mastodon https://www.techfinitive.com/what-experts-are-saying-about-the-asos-hack-immediate-lessons-for-asos-customers-and-all-businesses/
-
update from securityweek.com
ASOS Confirms Cyberattack, Data Breach
securityweek.com · 6d ago · October 7th, 2026
Over the past couple of days, numerous ASOS users in the UK complained about receiving a pop-up notification on their mobile apps, titled “ASOS hacked”. “We took immediate action to restrict access to the notification platforms and are working with our internal and external specialist advisers, as well as all relevant authorities,” ASOS said. ASOS pointed out that its website and application have not been affected, and that its operations have not been disrupted. “Snowflake is a data analysis and AI platform used by several organiza
-
mentioned by www.bleepingcomputer.com
"ASOS HACKED" went out from the official ASOS app on Tuesday morning: a push notification claiming the Snowflake instance was compromised an
www.bleepingcomputer.com · 6d ago · October 7th, 2026
-
mentioned by www.bleepingcomputer.com
# ASOS confirms # DataBreach after “HACKED” in-app notifications https://www. bleepingcomputer.com/news/secu rity/asos-confirms-data-breach-
www.bleepingcomputer.com · 6d ago · October 7th, 2026
-
mentioned by www.bbc.co.uk
Asos hackers took more personal details than first revealed, BBC finds https://www.bbc.co.uk/news/articles/c3zxjdw5ywgpo?at_medium=RSS&at_ca
www.bbc.co.uk · 5d ago · October 8th, 2026
-
mentioned by thecybersecguru.com
🚨 ASOS has confirmed a customer data breach involving a third-party platform, with hackers reportedly sending unauthorized alert messages th
thecybersecguru.com · 4d ago · October 9th, 2026
-
mentioned by www.standard.co.uk
Asos cyber breach not caused by vulnerability in our platform, says Snowflake https://www.standard.co.uk/news/uk/snowflake-asos-telegram-cal
www.standard.co.uk · 4d ago · October 9th, 2026
-
update from malware.news
ASOS breach update: Hackers stole customer details and shopping searches
malware.news · 4d ago · October 9th, 2026
ASOS has confirmed that attackers accessed customer information after tricking an employee into handing over login credentials. The company says it locked down the affected platforms and launched an investigation with internal and external specialists. It also says it has strengthened its security controls. In our initial coverage, we highlighted the potentially detailed customer profiles associated with ASOS’s marketing setup. The BBC’s findings now establish that at least some shopping-related information was taken. According to the BBC, which received a sample from the attackers, the exposed data includes: Names and home addresses Phone numbers and email addresses Customer numbers and dates of birth Searches customers made on the ASOS website Details such as when a customer started using ASOS The BBC reported search terms including “recla
-
update from www.darkreading.com
A recent security incident at a major retailer shows how one stolen login can give hackers access to a company network. Protect your account
www.darkreading.com · 4d ago · October 10th, 2026
A recent security incident at a major retailer shows how one stolen login can give hackers access to a company network. Protect your account
via Mastodon https://www.darkreading.com/cyberattacks-data-breaches/asos-breach-risks-customer-facing-saas
-
mentioned by www.darkreading.com
🗞 ASOS Breach Reveals the Risks in Customer-Facing SaaS via Dark Reading https://www. darkreading.com/cyberattacks-d ata-breaches/asos-breac
www.darkreading.com · 3d ago · October 10th, 2026
-
update from www.darkreading.com
ASOS breach: Dark Reading on the risks in customer-facing SaaS (Spanish-language share)
www.darkreading.com · 3d ago · October 10th, 2026
🖲️ Spanish-language cybersecurity post (hashtag share): #Cybersecurity #Ciberseguridad #Ciberseguranca #Security #Seguridad #Seguranca #News #Noticia #Noticias #Tecnologia (text truncated)
The post shares Dark Reading's article "ASOS Breach Reveals the Risks in Customer-Facing SaaS": https://www.darkreading.com/cyberattacks-data-breaches/asos-breach-risks-customer-facing-saas
via Mastodon https://www.darkreading.com/cyberattacks-data-breaches/asos-breach-risks-customer-facing-saas