ASOS Confirms Customer Data Breach After Hackers Send App Alert Through Worker Login
Intruders deceived an employee to gain access to customer details and sent an extortion message through the retailer's shopping app.
9 Oct 2026
Shoppers using the ASOS mobile application received an unexpected alert on their phones claiming the fashion retailer had been compromised. The company confirmed that unauthorized intruders took over internal systems to distribute the push notification and gained access to customer records.
The break-in began when attackers impersonated a trusted contact to deceive an ASOS employee. By obtaining that worker's credentials, the intruders were able to reach external software services that the retailer uses to manage customer information.
The rogue push alert warned users that corporate databases were compromised and demanded that the company negotiate to prevent the public release of the files. The message directed shoppers to a channel on the Telegram messaging service run by a group calling itself Xuanye Group.
ASOS confirmed that the intruders accessed personal details, including customer names and contact information. Further reports indicated that exposed data may include email addresses, phone numbers, home addresses, and browsing search history.
The retailer said that account passwords and bank card numbers were not compromised. ASOS told buyers that its website and mobile app remain safe to use, and customers do not need to change their account settings.
The extortionists claimed they entered company databases hosted by Snowflake, an online platform that stores and examines large sets of business information. Snowflake denied that its own platform was penetrated, while an artificial intelligence service linked to the data also mentioned by the group did not comment.
ASOS has not disclosed how many of its 17 million shoppers were affected by the breach. Following the incident, the company saw its share price drop by more than ten percent on the London Stock Exchange.
Security specialists are reviewing the incident alongside the company, an inquiry expected to take several weeks. ASOS advised customers to stay alert for suspicious emails or calls asking for passwords or financial information.