EDITION OF WED 7 OCT 2026
61 · TECHNOLOGY

Asos investigates breach after hackers send alerts to customers

publishers 39articles 48first reported 6 Oct, 09:36 UTCdeveloping since 6 Oct · 9 editions

Online fashion retailer Asos is investigating unauthorised activity after customers received a push notification claiming hackers had compromised company data and threatening to leak it.

The alert, titled “Asos hacked,” was addressed to the company’s data protection officer and IT team. It claimed the attackers had “fully compromised the Snowflake instance” and included a link to a Telegram channel associated with a previously little-known group calling itself Xuanye Group. The claim about access to the Snowflake cloud data platform has not been independently verified.

Asos said the incident involved third-party platforms it uses to communicate with customers. The company restricted access to its notification platforms and said it was working with internal and external specialists and relevant authorities.

The retailer said customers’ names and contact information may have been accessed, but it did not believe passwords or payment details had been compromised. Its website and app continued operating normally.

Cybersecurity experts said sending an alert through Asos’s app could indicate access to a notification system separate from the data platform the attackers claimed to have breached. They also warned that criminals could exploit publicity surrounding the incident through phishing emails or texts impersonating Asos.

Asos shares fell sharply in London, dropping as much as 13% during trading before paring some losses.

HOW THIS STORY WAS MADE

Written from 8 articles, 6 with the publisher's own text; 7 independent newsrooms once syndicated copies count as one; this version written 12 h after the record first saw the story; the editor kept it as written.

Publishers
39
Source articles
48
Given to the writer
8, 6 with the article's own text
Independent newsrooms
7
This version written
12 h after the record first saw the story
Second model (editor)
kept as written
Publication gate
passed
Human review
none

WHAT THE EDITOR DID

The second model checked the writer's draft against the same sources and published it as written.

Written by a language model from the sources above, then checked by a second model that may only cut, attribute or correct. How it works →

NAMED IN THE COVERAGE

OUTLETS CARRYING THE STORY, RUN BY RUN

0 21 42 7 Oct 8 Oct 9 Oct 10 Oct 11 Oct 12 Oct 13 Oct 14 Oct 6 Oct 12:21 UTC · Asos investigates after customers receive alleged hack notification 6 Oct 18:10 UTC · Asos investigates data breach after hackers send threats through its app 7 Oct 00:09 UTC · Asos investigates breach after hackers send alerts to customers 8 Oct 12:20 UTC · ASOS says customer data accessed after employee account breach

WHAT HELD, WHAT CAME LATER

From the first reports to the latest

  • Nothing ran from the first third of the coverage to the last.

Entered the story later

  • Nothing new took hold after the first third.

HOW THIS STORY DEVELOPED: EVERY HEADLINE, EVERY OUTLET →