{"id":793768,"date":"2026-10-06T13:50:11","date_gmt":"2026-10-06T13:50:11","guid":{"rendered":"https:\/\/www.newsbeep.com\/uk\/793768\/"},"modified":"2026-10-06T13:50:11","modified_gmt":"2026-10-06T13:50:11","slug":"asos-customers-receive-hack-notification-threatening-to-leak-data-asos","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/uk\/793768\/","title":{"rendered":"Asos customers receive \u2018hack\u2019 notification threatening to leak data | Asos"},"content":{"rendered":"

Asos is investigating after users of its mobile app received a notification claiming hackers had \u201cfully compromised\u201d the online fashion retailer\u2019s data.<\/p>\n

The value of Asos\u2019s shares on the London Stock Exchange dived more than 14% after thousands of customers received a notification titled \u201cAsos hacked\u201d with a link that sent them to the Telegram messaging service.<\/p>\n

The website and app appeared to be continuing to operate on Tuesday morning and it is understood that Asos is still investigating whether any hack has taken place.<\/p>\n

The Telegram channel operated by the purported hackers, who have named themselves the \u201cXuanye group\u201d, carried the message \u201cRegarding Asos, payment information is not affected\u201d without giving further details.<\/p>\n

The National Cyber Security Centre, part of the government\u2019s GCHQ intelligence agency, is offering its assistance to Asos.<\/p>\n

The message sent out to customers said: \u201cDear Asos DPO [data protection officer] and IT, we have fully compromised the Snowflake instance.\u201d<\/p>\n

An Asos app notification claiming the retailer has been hacked. Photograph: Screengrab<\/p>\n

Snowflake is a cloud platform used to store, process and analyse data including transactions and demographic information such as clothing sizes and body measurements. It also enables push notifications to clients\u2019 phones.<\/p>\n

Dray Agha, the senior manager of security operations at Huntress, an online security firm, said: \u201cSnowflake is a massive cloud database where retailers typically store sensitive customer information \u2013 it is a real worry if cyber criminals have indeed accessed it as they claim. The push notification suggests attackers have breached the systems controlling the Asos mobile app also..\u201d<\/p>\n

The link directed Asos customers to a Telegram channel apparently operated by the Xuanye group. Cyber experts said they had not heard of the group before and the push notification might be an attempt to grab wider attention.<\/p>\n

\u201cIt\u2019s not unusual to see new groups emerge, and often they wait until they have what they see as a significant opportunity before they announce themselves so as to enter the ecosystem with \u2018credibility\u2019, \u201d said Aiden Sinnot, the principal threat researcher at the cybersecurity firm Sophos.<\/p>\n

skip past newsletter promotion<\/a>Free newsletter |Every weekday<\/p>\n

Sign up to Business Today<\/p>\n

Get set for the working day \u2013 we’ll point you to all the business news and analysis you need every morning<\/p>\n

\"\"<\/p>\n

Xuanye has not been mentioned before on hacker forums or other Telegram channels. Sophos added.<\/p>\n

Marijus Briedis, the chief technology officer at the online service provider NordVPN, said: \u201cWhat customers should be particularly alert to now is what happens next. High-profile cyber incidents create ideal conditions for phishing attacks. Criminals may exploit the publicity by sending emails and texts claiming to be from Asos, perhaps asking customers to reset a password, confirm payment details, check an order or claim a refund.\u201d<\/p>\n

The potential hack comes after a string of British retailers including Marks & Spencer<\/a>, the Co-op<\/a> and Harrods<\/a> suffered cyber incidents last year. M&S and the Co-op experienced stock shortages and the former was forced to close its website for several weeks as it battled to ensure its systems were clean.<\/p>\n","protected":false},"excerpt":{"rendered":"Asos is investigating after users of its mobile app received a notification claiming hackers had \u201cfully compromised\u201d the…\n","protected":false},"author":2,"featured_media":793769,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[84,59,56,54,55],"class_list":["post-793768","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-business","tag-gb","tag-uk","tag-united-kingdom","tag-unitedkingdom"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/793768","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/comments?post=793768"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/793768\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media\/793769"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media?parent=793768"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/categories?post=793768"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/tags?post=793768"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}