ASOS is investigating a possible cyberattack after customers received a surprising alert through the retailer’s mobile app claiming that the company had been hacked and customer data could be exposed.
The message, sent on Tuesday, was titled “ASOS HACKED” and appeared to be directed at the company’s data protection officer and IT team. It claimed that hackers had gained access to an ASOS Snowflake instance and directed recipients to a Telegram channel.
The alert was delivered through the ASOS app rather than an external website or social media platform. The retailer’s website and app continued to operate normally on Tuesday.
ASOS has confirmed that it is aware of the reports and is investigating. However, the company has not confirmed that its systems were breached or that customer information was stolen.
ASOS Investigates Snowflake Claim
The message specifically referred to Snowflake, a cloud-based platform that organisations use to store and analyse data.
The attackers claimed they had compromised an ASOS Snowflake environment, but there is currently no confirmation that customer records were accessed or removed.
The notification also directed customers to a Telegram channel operated by a group calling itself Xuanye. According to The Guardian, the group was not previously known to cybersecurity researchers.
That uncertainty makes it difficult to determine how much of the hackers’ claim can be verified. ASOS’s investigation will be important in establishing whether there was an actual security breach and, if so, what systems or information may have been affected.
The incident comes as UK retailers continue to face growing cybersecurity risks. Marks & Spencer, the Co-op and Harrods were among major retailers affected by cyber incidents last year, with some attacks disrupting websites, stock systems and other business operations.
Customers Should Be Careful of Follow-Up Scams
While ASOS investigates, customers should also be alert to potential scams linked to the incident.
News of a suspected data breach can create an opportunity for criminals to impersonate the affected company. Customers could receive fake emails or text messages asking them to reset their password, verify payment details, check an order or claim a refund.
These messages can look convincing, particularly when they refer to a genuine security incident.
Cybersecurity experts speaking to ITV News have advised customers to be cautious and avoid clicking on suspicious links. Customers should instead access ASOS directly through its official website or app if they need to check an account or order.
Retail Cybersecurity Faces Growing Pressure
The incident highlights the wider cybersecurity challenges facing online retailers.
Companies such as ASOS rely on a network of websites, mobile apps, cloud platforms and other connected systems to manage everything from customer accounts to orders and payments. A security problem involving one part of that infrastructure can quickly raise concerns about the wider business.
For now, there is no confirmation that ASOS customer data has been stolen. The retailer’s investigation should provide a clearer picture of whether its systems were accessed and whether any customer information was exposed.
Until those questions are answered, the full extent of the alleged breach remains unclear. For customers, the safest approach is to remain cautious, watch for unusual messages and avoid sharing passwords or financial information through unsolicited links.
Frequently Asked Questions
1. Was ASOS hacked?
ASOS is investigating a reported cyber incident, but the company has not confirmed that its systems were breached or that customer data was stolen.
2. What did the ASOS hack notification say?
The notification claimed that hackers had gained access to an ASOS Snowflake instance and directed recipients to a Telegram channel.
3. Was ASOS customer data exposed?
There is currently no confirmation that customer information was accessed or stolen. The extent of the alleged incident remains under investigation.
4. What should ASOS customers do?
Customers should be cautious of unexpected emails, texts or messages asking for passwords, payment details or account verification. They should access ASOS directly through its official app or website.
5. What is Snowflake and why was it mentioned?
Snowflake is a cloud platform used by organisations to store and analyse data. The hack notification claimed an ASOS Snowflake environment had been compromised, although this has not been confirmed.
.webp)
