ASOS hacked? A threatning 'we will leak it' alert has shoppers checking their accounts; is their data at risk and should customers delete the app?

ASOS customers woke to an alert no shopper wants to see. A push notification titled “ASOS HACKED” appeared on phones on Tuesday. The message claimed attackers had “fully compromised” a Snowflake instance linked to the British fashion retailer. It ended with a threat: “Engage with us, or we will leak it”, as mentioned in a report by Cyber News.

Screenshots quickly spread across social media. Some customers removed saved payment methods. Others wondered whether personal information had been exposed.

No such data loss has been confirmed. ASOS said it was aware of the reports and was investigating, according to Reuters and the Financial Times. The company had not confirmed a cyberattack or disclosed any affected customer information at the time of writing.

Was ASOS hacked? Here is what we know

The short answer is that an alarming notification was sent through the ASOS app, but the wider claim remains unverified. Someone apparently gained enough access to distribute a push alert. Such access is serious. It does not prove they reached ASOS customer records.

ASOS continued operating its website and app after the message appeared. Normal service does not rule out a breach elsewhere. The notification included a Telegram link. Customers should avoid opening it. Another security risk is to click on a link controlled by an attacker.

What is the Snowflake platform mentioned in the alert?

Snowflake is a platform holding cloud data. Companies use it to store and analyze information The “Snowflake instance” likely means an account or data environment used by ASOS.

The wording is only a claim from an unidentified sender. No public evidence has yet shown what was accessed. No confirmed list of compromised information has been released either.

A reference to Snowflake does not mean the platform itself was breached. Investigators must establish what was accessed and how the notification was sent.

What should ASOS customers do after the hack alert?

Customers should watch for an official email or app update from ASOS. Messages requesting passwords or payment details deserve extra suspicion. Anyone who reused an ASOS password elsewhere should change it. A unique password offers better protection.

Bank statements should be checked for unfamiliar transactions. Customers do not need to cancel cards solely over an unconfirmed claim. Contact the bank if suspicious activity appears.

What must ASOS do if customer data was exposed?

UK rules require a company to assess the risk created by a personal-data breach. The Information Commissioner’s Office must generally be notified within 72 hours when a risk to people is likely. Customers must be told without undue delay when the risk is high.

ASOS now faces two urgent questions. Investigators must determine whether customer information was accessed. The company must also explain how an outside party apparently obtained the ability to send a notification through its app.

Until ASOS publishes its findings, “ASOS hacked” remains a disturbing allegation rather than a confirmed description of the full incident.

FAQs

Was ASOS payment information stolen?

No evidence has publicly confirmed that payment details were accessed. Customers should monitor official updates and review their accounts.

Should customers delete the ASOS app?

Deleting the app is not currently necessary. Avoid suspicious links, use a unique password and wait for verified guidance from ASOS.