Back News.Bloomberglaw

Asos Says Cyber Attack May Have Compromised Customer Data (3)

News.Bloomberglaw • October 6, 2026

Asos Plc confirmed it is investigating a suspected cyber attack after users of its shopping app received a notification threatening to leak data.

The British online apparel retailer said personal data including names and details may have been accessed in the attack, which occurred at 10 a.m. on Tuesday. The incident involved a breach of third-party communication platforms used by the company, Asos said several hours later, adding it did not believe payment cards or passwords were accessed.

Shares of Asos fell as much as 15% in London, the most intraday since May 2023, before slightly paring the ...

See Breaking News in Context

Bloomberg Law provides trusted coverage of current events enhanced with legal analysis.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ASOS App Notification Hack: Data Breach Threatens Customer Information On October 6, 2026, ASOS customers received alarming push notifications from the retailer's app, claiming that the company's Snowflake data platform had been fully compromised. The message, addressed to ASOS's data protection officer and IT team, threatened to leak sensitive data unless the company engaged with the attackers. The notification included a link to a Telegram channel operated by a group calling itself the Xuanye Group. ASOS has not confirmed any breach but is investigating unauthorized activity involving third-party platforms. Initial reports indicate that basic personal information may have been accessed, but payment card information and passwords are believed to be safe. The incident has caused ASOS shares to drop by approximately 10%. Experts warn that the method of delivery indicates a serious breach of ASOS’s systems, raising concerns about customer data exposure. 85 sources 54

Asos Says Cyber Attack May Have Compromised Customer Data (3)

The full story

Extracted Entities

Attack Types (1)

Companies (1)