ASOS Hackers Hijack App Notifications, Claim Snowflake Data Breach

ASOS experienced an unauthorized push notification sent from its official mobile app on October 6, 2026, directing customers to a Telegram channel run by a previously unknown group, Xuanye Group, which claims to have exfiltrated customer data from an ASOS Snowflake instance. ASOS says names and contact details may have been accessed but payment-card information and passwords are not believed impacted; Snowflake reports no evidence of platform compromise, the group has not published data samples, and UK NCSC and other investigators are assisting.