Skip to content
Asos shoppers sent pop-up message apparently from hackers threatening retailer

Asos shoppers sent pop-up message apparently from hackers threatening retailer

Bbc • October 6, 2026

We have heard nothing from Asos so far, but expect they could put out a statement soon.

It's a bit surprising we haven't heard from them already - it would be very unusual if this was the first the company had heard the hack.

Usually, cyber-attacks happen in private - they are extortion events between a victim organisation and a cyber crime gang. This allows them time to negotiate a price to pay.

The kind of thing we've seen today is really unusual.

It could go down in cyber-attack history as a really significant moment - it's a very aggressive move to try to extort the company so publicly.

It is possible this is more widespread than just a UK incident. I have been speaking to someone in the US just now who also got the pop-up on her phone.

In one of the few messages the hacker has posted on its Telegram page since creating it, it says payment information is not affected. Of course, we have to take everything cyber criminals say with a pinch of salt.

For context: In the notification sent from the Asos app, the alleged hackers included a link to a newly created Telegram channel for a group calling itself Xuanye Group. Cyber experts have advised Asos customers not to click on any links included in the notification

Extracted Entities

Companies (1)

Platforms (1)