ASOS Hacked as Attackers Abuse Customer Notification Platform to Threaten Data Leak

ASOS reported unauthorized customer notifications on October 6, 2026, where attackers claimed to have compromised the company’s Snowflake instance and posted a Telegram extortion link; ASOS has limited access to the affected messaging platforms and is investigating. Initial findings suggest basic personal information (names, contact details) may have been exposed while payment card data and passwords are not believed compromised; the Snowflake claim remains unverified. The report also references an earlier July/August incident involving account takeovers likely caused by credential stuffing, but no confirmed link to the notification incident has been established. Customers are advised to ignore the Telegram link, monitor accounts, and avoid reused passwords.