GoKawiilAsos confirms customer data breach via compromised Snowflake platform
Asos has confirmed that hackers breached a third-party platform hosting customer communication data, stealing names, home addresses, phone numbers, emails, and profile notes such as search queries. The attackers, identifying themselves as the Xuanye Group, used Asos's own app notification system to alert customers directly, demanding the company engage with them or risk having the stolen data leaked online.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident highlights growing risks tied to third-party data platforms like Snowflake, which have been targeted in multiple recent breaches affecting large companies. By hijacking Asos's own communication channel to deliver their extortion message, the hackers demonstrate an escalating tactic that could pressure companies publicly and erode customer trust even before full details of the breach's scope are known.
- Asos confirmed hackers stole customer names, addresses, phone numbers, emails, and profile notes.
- Attackers used Asos's own app notification system to publicly announce the breach and demand engagement.
- The breach reportedly originated from a compromised Snowflake instance accessed via stolen credentials, not a Snowflake system failure.
Password manager security key bundle — With breaches like Asos's exposing personal data tied to online accounts, a hardware security key adds a strong layer of protection beyond passwords. It's a simple way to secure your email and shopping accounts against credential-stuffing attacks that often follow these breaches.
See Password manager security key bundle on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: techcrunch.com — Zack Whittaker, 2026-10-08
Published there as: “Asos confirms breach of customer data after hackers send rogue app notification”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.