GoKawiilAsos investigates extortion attempt after Snowflake-linked data breach notification sent to customers
Asos customers received a push notification claiming hackers had fully compromised the retailer's Snowflake cloud instance and threatening to leak the data unless the company engaged with them. The message, addressed to Asos's data protection and IT teams, linked to a Telegram channel tied to a group calling itself Xuanye Group. Asos confirmed it is investigating unauthorised activity on third-party platforms used to communicate with customers, restricted access to the notification systems, and said names and contact details may have been exposed but payment data and passwords were not believed to be affected.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident highlights how attackers are increasingly exploiting third-party cloud and notification infrastructure, such as Snowflake, rather than breaching a company's core systems directly, which could complicate accountability and response. Because the extortion message was sent straight to customers rather than negotiated privately, it suggests the attackers may be using public pressure as leverage, though their actual access to sensitive data remains unverified. The case could prompt other retailers relying on similar third-party platforms to scrutinize their vendor security practices.
- Asos customers received a push notification claiming a Snowflake cloud breach and threatening a data leak.
- Asos says names and contact details may be exposed, but payment info and passwords appear safe.
- The attack targeted third-party communication platforms, not Asos's core app or website, which remain operational.
YubiKey 5 NFC Security Key — With retailers like Asos facing data breaches that expose customer accounts, adding hardware-based two-factor authentication is one of the best ways to keep your own logins safe even if a company's systems are compromised. A YubiKey lets you lock down your email, password manager, and shopping accounts so stolen credentials alone can't be used to break in.”,
See YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: engadget.com — Anna Washenko, 2026-10-06
Published there as: “Asos hit by extortion hack that may have compromised some customer data”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.