British online fashion retailer ASOS is investigating unauthorised access to third-party communication platforms after customers received a suspicious mobile notification claiming the company’s systems had been compromised.
The alert, titled “Asos hacked”, alleged that attackers had accessed the retailer’s Snowflake data environment and threatened to disclose information. It directed recipients to a Telegram channel associated with a group calling itself Xuanye Group.
ASOS said some customer information, including names and contact details, may have been accessed. However, the company did not believe payment card details or account passwords had been compromised. Its website and app continued operating normally.
The retailer said: “We are investigating unauthorised activity involving third-party platforms that we use to communicate with customers. We took immediate action to restrict access to the notification platforms and are working with our internal and external specialist advisers, as well as all relevant authorities.”
The incident triggered a sharp decline in ASOS shares, which closed 9.56% lower after falling more than 14% during trading. The UK’s National Cyber Security Centre offered assistance as investigations continued.
Cybersecurity specialists also warned customers to remain alert to phishing attempts, including fraudulent messages requesting password resets, payment information or order verification.
The incident highlights the risks fashion retailers face when customer communication systems are compromised, potentially undermining consumer confidence even when their core shopping platforms remain accessible.
