ASOS
ModerateConfirmedRetail
On 6 October 2026, at around 10:00, ASOS customers received an unauthorised notification titled "ASOS HACKED" through the online fashion retailer's app. Its author, a group calling itself Xuanye, claims to have compromised a Snowflake instance and threatens to publish data unless the company engages with them. ASOS says it is investigating unauthorised activity on third-party platforms used to communicate with customers, and acknowledges that basic personal information, including names and contact details, may have been accessed.
Names combined with contact details allow a malicious third party to target the people concerned with credible phishing messages posing as ASOS.
- Disclosed on
- October 6, 2026
- Incident dated
- October 6, 2026
- Sector
- Retail
- Country
- GB
- Cause
- Third-party provider
Exposed data
- Full name
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
- ASOS confirme la cyberattaque : les hackers menacent de faire fuiter les données clientsCyberattaque.org
- 'ASOS Hacked' Warns Notification Sent To CustomersForbes
- ASOS confirms it's victim of hack attack as customers are contacted directly by hacker groupFashionNetwork USA
- ASOS hack: App notification threatens to 'leak' detailsGB News
- ASOS Hacked? What We Know About the Ransom NoteTechloy
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact