ASOS Sends In-App Warning After Fake 'HACKED' Notifications
UK fashion retailer ASOS confirmed a data breach on Tuesday, October 6, 2026, after threat actors sent unauthorized push notifications through its official mobile application. The notifications, which began appearing around 5:00 a.m. ET, displayed the message 'ASOS HACKED' and claimed that the attackers had fully compromised the company's Snowflake environment. The message urged ASOS's data protection officer and IT team to engage with the threat actors or face a data leak.
The notifications directed users to a Telegram channel operated by a group calling itself the 'Xuanye group.' Multiple BleepingComputer readers and Reddit users reported receiving the same alert, indicating widespread distribution among ASOS app users. In response, ASOS began displaying an in-app notice advising customers to disregard the notification and avoid clicking any external links it contained.
ASOS Confirms Unauthorized Access to Communication Platforms
ASOS confirmed that third-party platforms used to communicate with customers were accessed without authorization. The company stated that basic personal information, including names and contact details, may have been exposed as a result. However, ASOS emphasized that it does not believe payment card information or account passwords were impacted in the incident.
The retailer, which sells clothing, footwear, accessories, and beauty products to customers worldwide, including in the United States, has not confirmed the threat actors' claim that its Snowflake environment was compromised. ASOS also declined to disclose how many customers may have been affected by the breach.
Xuanye Group Makes Claims but Provides No Evidence
The 'Xuanye group' posted messages to its Telegram channel claiming responsibility for the breach. In initial messages, the group stated that payment information was not affected. However, they later issued a 'FINAL STATEMENT' asserting that they had stolen customer information during the attack.
The group's message claimed: 'The affected organisation's app is safe to use. The incident involves customer information, it is safe on our server, and it will not be touched for a designated period.' They also added: 'Considering the current situation regarding incident disclosure in the cyber security landscape, you can thank us for our generous clarity regarding this incident.'
Despite these claims, the Xuanye group did not disclose what specific customer information was allegedly stolen, how many individuals were impacted, or provide any evidence demonstrating that they had successfully compromised ASOS's Snowflake environment. BleepingComputer attempted to contact the threat actors but declined to engage after learning that the only available contact method required payment, which violates the outlet's editorial guidelines.
ASOS Urges Vigilance Amid Ongoing Investigation
As of the confirmation, ASOS continues to investigate the incident and has not found evidence that payment-related data or login credentials were accessed. The company maintains that the core functionality of its app remains safe for users but advises vigilance against unsolicited messages containing external links.
This incident adds to a growing list of breaches involving unauthorized access to customer communication channels, highlighting the risks associated with third-party notification services. ASOS has not reported any disruption to its retail operations as a result of the breach.
Source: BleepingComputer