{"id":918255,"date":"2026-10-06T14:20:25","date_gmt":"2026-10-06T14:20:25","guid":{"rendered":"https:\/\/www.newsbeep.com\/au\/918255\/"},"modified":"2026-10-06T14:20:25","modified_gmt":"2026-10-06T14:20:25","slug":"asos-customers-around-the-world-receive-threatening-app-alert-in-suspected-hack","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/au\/918255\/","title":{"rendered":"ASOS: Customers around the world receive threatening app alert in suspected hack"},"content":{"rendered":"

ASOS customers in Australia, UK and other parts of the world have been sharing screenshots of an app notification from the fast fashion brand.<\/p>\n

The message sent on Tuesday claims the company\u2019s system has been breached, with hackers threatening to leak customer data.<\/p>\n

\"ASOS<\/p>\n

ASOS customers in Australia, UK and other parts of the world have been sharing screenshots of an app notification from the fast fashion brand.\u00a0Supplied\/Mikala Theocharous<\/p>\n

\u201cASOS hacked,\u201d the alert, which was sent about 8pm AEST, reads.<\/p>\n

\u201cDear ASOS DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it.\u201d<\/p>\n

ASOS has not made any announcements to customers as yet about the message and did not immediately respond to nine.com.au\u2019s request for comment.<\/p>\n

It\u2019s understood it is still investigating if a data breach has, in fact, taken place.<\/p>\n

The ASOS chatbot has said the company is “aware of the notification and are currently investigating” but also noted the app alert “may be a scam”.<\/p>\n

\u201cWe don\u2019t have any further information to share at this stage, but we\u2019ll provide an update as soon as we know more,\u201d it added.<\/p>\n

The link sent to customers via the app message takes people to a newly created channel on messaging app Telegram, labelled Xuanye group gateway.<\/p>\n

Cybersecurity experts Sophos\u00a0told British media its specialists hadn\u2019t heard of this group before and it had not come up on any of the channels being monitored by the company.<\/p>\n

\"ASOS<\/p>\n

ASOS has not made any announcements to customers as yet about the message and did not immediately respond to nine.com.au\u2019s request for comment.\u00a0Getty<\/p>\n

The website appears to still be working as usual with no pop-ups or other messages.<\/p>\n

Charlotte Wilson, head of enterprise at cybersecurity firm Check Point, said if confirmed it would be a very serious breach.<\/p>\n

\u201cIf confirmed, this is a deeply serious attack because the hackers appear to have done something particularly brazen: turned ASOS\u2019s own app into their ransom note,\u201d Wilson told BBC<\/a>.<\/p>\n

\u201cMillions of people trust notifications from apps on their phones because they are supposed to come directly from the company.\u201d<\/p>\n

According to Sky UK<\/a>, the fashion brand, which is based in the UK, employs about 2800 staff and is worth about \u00a3602 million ($1.15 billion).<\/p>\n

The global retailer has 16.4 million active customers who have shopped in the last 12 months.<\/p>\n

The company\u2019s share price had been on the up before the apparent hack but dived by almost 12 per cent on the London Stock Exchange after news of the suspected hack emerged, according to Guardian UK<\/a>.<\/p>\n

What\u2019s a Snowflake?<\/p>\n

The message claimed the hackers had \u201cfully compromised the Snowflake instance\u201d, which is believed to refer to cloud data storage company Snowflake.<\/p>\n

The company is used by a number of retailers to store sensitive customer information and has been the subject of previous data breaches, including Ticketmaster, Live Nation, Santander Bank and AT&T.<\/p>\n

Cybersecurity expert Dan Bird, from Horizon3, said the message to customers suggested the breach had gone beyond the Snowflake database.<\/p>\n

\"ASOS<\/p>\n

The ASOS website appears to still be working as usual with no pop-ups or other messages.\u00a0Nine<\/p>\n

\u201cSending a push notification to ASOS\u2019s app users would require access to the company\u2019s notification system, which is separate from the Snowflake data platform the attackers claim to have compromised,\u201d Bird told BBC.<\/p>\n

\u201cIf both claims hold up, it suggests the attackers got hold of credentials that opened more than one door.\u201d<\/p>\n

Dray Agha, senior manager of security operations at online security firm Huntress, echoed those sentiments.<\/p>\n

\u201cThe push notification suggests attackers have breached the systems controlling the ASOS mobile app also. This is clear public extortion,\u201d he told The Guardian.<\/p>\n

\u201cSending a ransom demand directly to consumer devices is an aggressive extortion tactic designed to force the business into a quick negotiation. I strongly advise shoppers to watch out for targeted phishing attempts while we wait for official confirmation of a data breach.\u201d<\/p>\n

\"ASOS<\/p>\n

Customers are being advised to be cautious around follow up emails and messages.\u00a0Instagram<\/p>\n

Under UK law, companies are required to report any personal data breaches to the Information Commissioner\u2019s Office within 72 hours after discovering a breach.<\/p>\n

In some instances, they will also be required to report to the National Cyber Security Centre and police.<\/p>\n

What should customers do?<\/p>\n

Customers are being advised to be on their guard for suspicious activity and follow-up messages.<\/p>\n

\u201cHigh-profile cyber incidents create ideal conditions for phishing attacks,\u201d NordVPN chief technology officer Marijus Briedis said.<\/p>\n

\u201cCriminals may exploit the publicity by sending emails and texts claiming to be from ASOS, perhaps asking customers to reset a password, confirm payment details, check an order or claim a refund.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"ASOS customers in Australia, UK and other parts of the world have been sharing screenshots of an app…\n","protected":false},"author":2,"featured_media":918256,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[64,63,99],"class_list":["post-918255","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-au","tag-australia","tag-business"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/918255","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/comments?post=918255"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/918255\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media\/918256"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media?parent=918255"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/categories?post=918255"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/tags?post=918255"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}