Asos investigates extortion attempt after Snowflake-linked data breach notification sent to customers
Asos customers received a push notification claiming hackers had fully compromised the retailer's Snowflake cloud instance and threatening to leak the data unless the company engaged with them. The message, addressed to Asos's data protection and IT teams, linked to a Telegram channel tied to a group calling itself Xuanye Group. Asos confirmed it is investigating unauthorised activity on third-party platforms used to communicate with customers, restricted access to the notification systems, and said names and contact details may have been exposed but payment data and passwords were not believed to be affected.