ASOS customers heard about the attack from the attacker by Lucie Cardiet

On 6 October 2026 an attacker using the name "xuanyewengateway" sent extortionate push notifications to ASOS app users claiming a Snowflake compromise and linking to a Telegram channel; ASOS confirmed unauthorized activity in third‑party customer‑messaging services and potential access to basic personal information (names and contact details) while saying payment card data and passwords do not appear affected. The Snowflake claim is unverified, investigations are ongoing, and the incident underscores risks from third‑party service keys/tokens that can let an attacker send authenticated messages or access downstream data.