< Back to all clusters
[TECHNOLOGY] · United Kingdom, Australia, France, Sweden, Ireland · 43 sources

started · updated

ASOS investigates app notification hijack and alleged data breach

British fashion retailer ASOS is investigating an incident where attackers hijacked its mobile app notification system to send threatening messages directly to customers. On October 6, users in multiple countries, including the UK, Australia, France, and Sweden, received push notifications titled ‘ASOS HACKED’. The messages, which appeared to be addressed to the company’s data protection officer and IT teams, claimed that a Snowflake instance had been fully compromised and threatened to leak data unless demands were met.

The hacking group, identified as Xuanye Group, used a Telegram link within the notification to direct users to a gateway channel. While the group claimed to have stolen customer information, ASOS stated that only basic personal information, such as names and contact details, may have been accessed. The company noted that it does not believe payment card information or account passwords were affected.

Snowflake has denied the claims, stating that its investigations found no compromise of its platform. ASOS shares experienced a significant decline, dropping by as much as 14 percent following the incident. The company is currently working with internal and external specialists and relevant authorities to investigate the unauthorized activity involving third-party communication platforms.

Entities

ASOS · Information Commissioner's Office · London · London Stock Exchange · Metropolitan Police · Simon AI · Snowflake · Telegram · Xuanye · Xuanye group

Claims

What the coverage asserts, and how many sources carry each claim.

Sources

ASOS confirms cyber attack [www.retailgazette.co.uk]