# ASOS customer data breach and app notification hijack > Live situation record from CLSTR: https://clstr.news/situations/asos-customer-data-breach-and-app-notification-hijack > Updated: 2026-10-10T22:46:14.000Z. Sources: 61. Developments: 3. British fashion retailer ASOS is investigating a cyberattack involving the hijacking of its mobile app notification system. On October 6, users in several countries received push notifications titled ‘ASOS HACKED’, which contained threats from a group identified as Xuanye Group. The attackers claimed to have compromised a Snowflake instance and threatened to leak data unless demands were met, though Snowflake has denied these claims, stating its own systems were not breached and the issue did not stem from a platform vulnerability. By October 8, ASOS confirmed that an unauthorized third party had accessed customer names and contact details. The breach occurred after attackers used social engineering to impersonate a ‘trusted contact’ to obtain an employee’s login credentials, which were then used to access certain third-party platforms. In addition to names, email addresses, phone numbers, and physical addresses, hackers accessed ‘certain non-personal account related information’, including customers' recent website search histories. ASOS clarified that payment card information and passwords were not accessed. The company is currently working with law enforcement and regulatory authorities, including the UK Information Commissioner’s Office, while implementing additional security controls. Following the incident, ASOS shares experienced significant volatility, dropping as much as 12% in value. Recent updates indicate the breach occurred through Simon AI, a platform built on top of the Snowflake data storage service. Beyond basic contact details, the compromised data includes customer identification numbers and dates of birth. While the Xuanye Group has claimed responsibility for the ASOS incident, they have also claimed involvement in a separate data breach at Air France-KLM involving internal employee files. ## Claims - Hackers accessed an employee account by impersonating a trusted contact to obtain login credentials. (corroborated by 11 sources) - Payment card details and account passwords were not compromised in the attack. (corroborated by 6 sources) - Stolen customer data includes names, home addresses, phone numbers, and email addresses. (corroborated by 5 sources) - Snowflake stated that its own systems and platform were not breached or compromised. (corroborated by 4 sources) - ASOS has locked down the affected third-party platforms and is working with law enforcement. (corroborated by 3 sources) - The breach included customers' recent website search histories. (corroborated by 2 sources) - The hackers, identifying as Xuanye Group, sent unauthorized push notifications to customers via the ASOS app. (corroborated by 2 sources) - ASOS shares experienced significant volatility, dropping as much as 12% following the incident. (corroborated by 2 sources) - The hacking group, identified as Xuanyewen, claims they gained access by impersonating trusted contacts to obtain an employee's login credentials. (single source) ## Timeline ### 2026-10-10: Asos confirms data breach after hackers use mobile app for extortion Asos has confirmed a data breach involving customer names, contact details, and browsing history after hackers used the company's app to send threatening notifications. The group also claims a breach at Air_Fr_ 6 sources. https://clstr.news/cluster/asos-customers-receive-threatening-hack-notifications-via-mobile-app ### 2026-10-08: ASOS confirms customer data breach following cyberattack ASOS confirmed a data breach after hackers impersonated an employee to access customer names, contact details, and search histories via third-party platforms. Payment data remains secure. 18 sources. https://clstr.news/cluster/asos-confirms-customer-data-breach-following-cyberattack ### 2026-10-06: ASOS investigates app notification hijack and alleged data breach ASOS is investigating a cyber incident after hackers hijacked its app to send ‘ASOS HACKED’ notifications to customers, claiming a Snowflake data breach. Basic personal data may have been accessed. 43 sources. https://clstr.news/cluster/asos-customers-receive-threatening-app-notifications-regarding-alleged-hack --- Cite as: ASOS customer data breach and app notification hijack. CLSTR, https://clstr.news/situations/asos-customer-data-breach-and-app-notification-hijack