started · updated
ASOS investigates app notification hijack and alleged data breach
British fashion retailer ASOS is investigating an incident where attackers hijacked its mobile app notification system to send threatening messages directly to customers. On October 6, users in multiple countries, including the UK, Australia, France, and Sweden, received push notifications titled ‘ASOS HACKED’. The messages, which appeared to be addressed to the company’s data protection officer and IT teams, claimed that a Snowflake instance had been fully compromised and threatened to leak data unless demands were met.
The hacking group, identified as Xuanye Group, used a Telegram link within the notification to direct users to a gateway channel. While the group claimed to have stolen customer information, ASOS stated that only basic personal information, such as names and contact details, may have been accessed. The company noted that it does not believe payment card information or account passwords were affected.
Snowflake has denied the claims, stating that its investigations found no compromise of its platform. ASOS shares experienced a significant decline, dropping by as much as 14 percent following the incident. The company is currently working with internal and external specialists and relevant authorities to investigate the unauthorized activity involving third-party communication platforms.
Entities
ASOS · Information Commissioner's Office · London · London Stock Exchange · Metropolitan Police · Simon AI · Snowflake · Telegram · Xuanye · Xuanye group
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 4 SOURCES] Thousands of users received the threatening message shortly before 10:00 AM British time. www.fehmarn24.de · www.ruhr24.de
- [● 22 SOURCES] ASOS stated that basic personal information may have been accessed, though payment card data and passwords were not believed to be affected. www.fehmarn24.de · www.ruhr24.de · timesng.com · brandaktuell.at · www.basingstokegazette.co.uk · +15 more
- [● 25 SOURCES] ASOS customers received a push notification with the headline ‘ASOS HACKED’ on October 6. www.fehmarn24.de · www.ruhr24.de · www.basingstokegazette.co.uk · timesng.com · brandaktuell.at · +19 more
- [● 25 SOURCES] Attackers claim to have compromised a Snowflake instance and threatened to release data. brandaktuell.at · www.basingstokegazette.co.uk · timesng.com · www.fehmarn24.de · www.ruhr24.de · +19 more
- [● 7 SOURCES] The notification included a link to a Telegram channel called Xuanye gateway. gulfnews.com · www.basingstokegazette.co.uk · timesng.com · www.malwarebytes.com · www.dday.it · +1 more
- [● 9 SOURCES] ASOS shares fell by as much as 14 percent following the notifications. npinvestor.dk · extra.ie · gulfnews.com · www.basingstokegazette.co.uk · www.europesays.com · +3 more
- [● 5 SOURCES] ASOS confirmed an unauthorised customer notification was sent on October 6. www.malwarebytes.com · www.europesays.com · english.alsiasi.com · www.perthnow.com.au
- [● 23 SOURCES] The notification was addressed to ASOS’s data protection officer and IT teams. www.basingstokegazette.co.uk · forbesliberia.com · timesng.com · wochentlich.de · brandaktuell.at · +18 more
- [● 3 SOURCES] Snowflake stated that its investigations found no compromise of its platform. www.europesays.com · nationalcybersecurity.com · www.ad-hoc-news.de