'ASOS hacked': App users receive notifications sent by hackers

Live updates

1. 1d ago

   ASOS shares drop 14% after hackers send push notifications to millions

   ASOS is investigating a security breach that began October 6, 2026, when millions of app users received a push notification claiming the company's Snowflake instance was fully compromised. The attackers gained access by tricking an employee into providing login credentials, which allowed them to use third-party messaging platforms. While ASOS maintains that payment details and passwords are secure, a data sample provided to the BBC suggests the stolen information includes customer search histories. The incident caused ASOS shares to fall 14% intraday.

   Why it matters

   The breach highlights the risk of social engineering attacks against employees to bypass security perimeters. It specifically targeted the communication channels used for marketing and discount codes to reach a wide user base. Snowflake has denied that a platform vulnerability caused the incident.

   What is confirmed

   • Attackers sent push notifications to millions of ASOS app users on October 6, 2026.
   • The breach occurred after an attacker tricked an employee into revealing login credentials.
   • The notification sent to users claimed the Snowflake instance was fully compromised.
   • ASOS shares fell 14% intraday following the incident.

   Still unconfirmed

   • Stolen data includes the specific searches customers performed on the ASOS website.
   • The breach affected users in the UK and several other markets.

   What to watch next

   • Verification of the data sample provided to the BBC
   • Further statements from Snowflake regarding the nature of the instance compromise
   Sources used for this update (6)

   1. theperimetersite.com — What Got Hacked Today? Latest Cyber Attacks & Breaches ...
   2. informedclearly.com — Asos Hack Push Notifications: Data Claim & Shares Fall 14%
   3. www.unite.ai — When the Ransom Note Arrives Through Your Own App - Unite.AI
   4. safedep.io — Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor - Real-time Open Source Software Supply Chain Secur....
   5. cve.tools — ASOS's "Hacked" Push Notification Named Snowflake. ASOS and ...
   6. morningoverview.com — ASOS says attackers took customers’ details, and a sample ...
   confidence 90%
2. 4d ago

   ASOS breach caused by employee impersonation and phished login

   ASOS confirmed a cyberattack occurred after an attacker posing as a trusted contact stole an employee's login credentials. The intruder used these credentials to access third-party platforms used for messaging customers, resulting in the delivery of threatening push notifications on October 6, 2026. While names, contact details, and search histories were potentially exposed, the company stated that passwords and payment card details remained secure. Snowflake has denied that a vulnerability in its own platform caused the incident.

   Why it matters

   The breach highlights vulnerabilities in how retail brands manage third-party software as a service tools. It demonstrates how a single compromised account can grant attackers direct communication channels to a global customer base.

   What is confirmed

   • An attacker posing as a trusted contact obtained an employee login to access third-party customer messaging platforms.
   • The breach exposed customer names, contact details, and search histories.
   • Payment card details and passwords were not affected by the incident.
   • Snowflake stated the breach did not result from a vulnerability in its platform.

   What to watch next

   • Regulatory findings regarding ASOS's legal and regulatory compliance
   • Details on the specific third-party messaging platforms compromised
   Sources used for this update (4)

   1. www.brownejacobson.com — The ASOS hack: Legal lessons for retail fashion brands
   2. bkl.co.uk — What can companies learn from the ASOS data breach? - BKL
   3. dailyascension.com — ASOS Got Hacked, and the Hackers Messaged Customers Through ...
   4. safeguard.sh — ASOS Breach: One Phished Login, Customer Messaging Platforms ...
   confidence 100%
3. 6d ago

   ASOS Confirms Customer Data Breach Following App Notification Hack

   Fashion retailer ASOS is investigating a cyber incident after unidentified third parties gained unauthorized access to its app systems. Customers across the UK received bizarre and threatening push notifications on October 6, 2026, claiming hackers had compromised personal data. ASOS confirmed that names, contact details, and search histories may be exposed, but stated that payment card details and passwords were not affected. Data storage firm Snowflake also stated that the breach was not caused by a vulnerability within its platform.

   Why it matters

   The incident sent company shares down nearly 10 percent as users faced extortion attempts through hijacked app notification channels. The attack highlights ongoing vulnerabilities in corporate app infrastructure and third-party notifications. Customers have received limited official details beyond warnings to remain vigilant against unexpected calls.

   What is confirmed

   • ASOS confirmed that hackers accessed customer personal information including names and contact details.
   • ASOS stated that payment card details and passwords were not affected by the breach.
   • Data storage firm Snowflake stated that the cybersecurity breach at ASOS was not caused by a vulnerability or flaw with its platform.
   • A rogue app notification hit customers on October 6, 2026.

   Still unconfirmed

   • Hackers compromised a Snowflake data environment during the attack.

   What to watch next

   • Official findings from ASOS regarding the full scope of compromised user data
   • Further statements from security investigators tracking the hijacked notification channel
   Sources used for this update (9)

   1. wwd.com — WWD - Women's Wear Daily brings you breaking news about the fashion ...
   2. www.irishmirror.ie — ASOS data breach: What customers need to know after names, contact details and search histories hacked
   3. www.helpnetsecurity.com — Week in review: FortiBleed is still active, Patch Tuesday forecast
   4. www.bbc.co.uk — King Charles warns malicious online actors are evolving their ...
   5. help.naver.com — Futures Flat As Oil Rebounds After Trump's "Energy Ceasefire" Unravels, Memory Stocks Slide | ZeroHedge
   6. proton.me — Android vs. iOS security: Which operating system is more secure?
   7. shattered.io — ASOS Breach: Hijacked App Notification Used for Extortion
   8. westernmorning.news — Asos cyber breach not caused by vulnerability in our platform, says Snowflake | Western Morning News
   9. www.techtimes.com — ASOS Data Breach Exposes Customer Information After Hackers Hijack In-App Notifications - Tech Times
   confidence 90%
4. 9d ago

   ASOS Confirms Breach After Hackers Hijack Push Notifications

   Fashion retailer ASOS is investigating a cyber incident after unidentified third parties gained unauthorized access to its app systems. Users across the UK received bizarre and threatening push notifications claiming hackers had compromised personal data and a Snowflake data environment. ASOS confirmed that names and contact details may be exposed, but stated that payment card details were not accessed. The breach sent company shares down nearly 10 percent, while customers have received limited official details about the attack beyond warnings to remain vigilant against unexpected calls.

   Why it matters

   Retail applications have become frequent targets for threat actors seeking direct channels to consumer devices. The incident highlights the inherent vulnerabilities of retail mobile apps when external parties hijack push notification systems to broadcast threats directly to users. Meanwhile, reports indicate that other major fashion retailers like H&M are also facing targeting by hackers.

   What is confirmed

   • ASOS confirmed a breach after attackers sent fake push alerts claiming a Snowflake hack.
   • Names and contact details may be exposed, but payment details were not accessed.
   • Shares in fashion company ASOS fell nearly 10 percent following the incident.
   • Hackers used the ASOS app to send pop-up notification messages to users across the UK.

   Still unconfirmed

   • Threatening alerts demanded users engage with the hackers or face a data leak.

   What to watch next

   • Further updates from ASOS regarding the full extent of the data compromise.
   • Official regulatory or investigative findings on how the attackers accessed the app systems.
   Sources used for this update (8)

   1. cybersecuritynews.com — ASOS Hacked – App Users Receive Notifications Sent by Hackers
   2. www.theguardian.com — Asos warns customer data may be compromised after ‘unauthorised’ app access | Asos
   3. uk.news.yahoo.com — Why was Asos hacked and who did it? - Yahoo News UK
   4. www.thenews.com.pk — ASOS hacked? Users receive threatening alerts: ‘Engage with us or we will leak it’
   5. www.buzzfeed.com — ASOS Users React To Bizarre ‘Hacker’ Notification
   6. dailysecurityreview.com — ASOS Confirms Breach After Hackers Hijack App Push Notifications
   7. wwd.com — Most Fashion Brands Have Apps Now. The Asos Hack Shows Why That Might Be a Bad Idea.
   8. finance.yahoo.com — Asos confirms breach of customer data after hackers send ...
   confidence 95%
5. 14d ago

   ASOS confirms hackers accessed customer data

   ASOS has confirmed that hackers accessed customer data, including names and contact details, during an 'unauthorised activity'. The company says it is investigating and has warned customers to be vigilant of unexpected calls. Hackers sent a notification to app users, claiming to have accessed personal data. ASOS says payment details were not accessed.

   Why it matters

   The incident has raised concerns about data security and phishing scams. ASOS has 16 million users worldwide. The company is taking steps to protect customers and prevent further unauthorised access.

   What is confirmed

   • ASOS confirmed an 'unauthorised customer notification' was sent out via its app.
   • Hackers accessed names and contact details of customers during 'unauthorised activity'.
   • ASOS says payment details were not accessed.
   • The company is investigating 'unauthorised activity' involving third-party platforms.

   Still unconfirmed

   • Customers received a notification from hackers claiming to have accessed personal data.

   What to watch next

   • ASOS provides further information on data accessed.
   • Customers report any suspicious activity to ASOS.
   • Regulatory bodies investigate the incident.
   Sources used for this update (19)

   1. BBC — 'ASOS hacked': App users receive notifications apparently sent by hackers
   2. The Guardian — Asos customers receive ‘hack’ message threatening to leak personal data
   3. Sky News — ASOS latest: Company says 'personal information' may have been accessed during 'unauthorised activity' - but not payment details
   4. Business Insider — ASOS customers got an ominous notification this morning. Here's what the retailer is telling users.
   5. BBC — 'Asos hacked': What can I do to protect myself?
   6. Mashable — Asos hacked notification: What a snowflake instance is
   7. News.com.au — Fashion company loved by Aussies hacked
   8. Financial Times — Asos customers’ data ‘may have been accessed’ in hack
   9. Yahoo — Shoppers of popular fashion retailer say hackers are sending them messages on app
   10. www.bbc.co.uk — 'ASOS hacked': App users receive notifications apparently sent by hackers - BBC News
   11. www.bbc.com — Asos users receive pop-up notification apparently sent by hackers
   12. nz.news.yahoo.com — What can I do to protect myself after 'Asos hacked' message? - Yahoo
   confidence 90%