[REVISION HISTORY]

ASOS customer data breach and app notification hijack

Updated 3 times since CLSTR started tracking revisions of this situation.

What changed

2026-10-10 06:58 UTC → 2026-10-13 18:53 UTC · added ~~removed~~

British fashion retailer ASOS is investigating a cyberattack involving the hijacking of its mobile app notification system. On October 6, users in several countries received push notifications titled ‘ASOS HACKED’, which contained threats from a group identified as Xuanye Group. The attackers claimed to have compromised a Snowflake instance and threatened to leak data unless demands were met, though Snowflake has denied these claims, stating its own systems were not breached and the issue did not stem from a platform vulnerability. By October 8, ASOS confirmed that an unauthorized third party had accessed customer names and contact details. The breach occurred after attackers used social engineering to impersonate a ‘trusted contact’ to obtain an employee’s login credentials, which were then used to access certain third-party platforms. In addition to names, email addresses, phone numbers, and physical addresses, hackers accessed ‘certain non-personal account related information’, including customers' recent website search histories. ASOS clarified that payment card information and passwords were not accessed. The company is currently working with law enforcement and regulatory authorities, including the UK Information Commissioner’s Office, while implementing additional security controls. Following the incident, ASOS shares experienced significant volatility, dropping as much as 12% in value. Recent updates indicate the breach occurred through Simon AI, a platform built on top of the Snowflake data storage service. Beyond basic contact details, the compromised data includes customer identification numbers and dates of birth. While the Xuanye Group has claimed responsibility for the ASOS incident, they have also claimed involvement in a separate data breach at Air France-KLM involving internal employee files.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.