Customers of the ASOS retail giant received a push notification from the company's mobile application. The content was directed at company management and IT, and states that an unknown group "Xuanye Gateway" has compromised a Snowflake software instance and prompts the company to get in contact.

Snowflake is a data aggregation platform which takes retail data from many sources and allows querying, processing and rules-based alerting. Initial statements from ASOS declare that that have found no such compromise, and they have taken initial steps to restrict access to notification platforms.

The incident has been concerning to members of the public who witnessed and interacted with the application. Statistics show that the notification was potentially seen by thousands, who have taken to social media to ask questions and relay their feelings about what happened.

Whether the attackers do indeed have full access or not, the primary question regarding the incident is the possibility of access to customer data and the threat of further notifications. Users of the Snowflake platform should undertake immediate security reviews and compromise assesments to determine whether their instances may have been affected in a similar manner.

If you think your organisation may be affected by this incident, please reach out to the Integrity360 Incident Response team.

Update 2026-10-08

ASOS Has now confirmed that customer data was accessed during the incident.

According to the statement, the data includes names, addresses, phone numbers e-mails. The data also includes customer queries to the search bar used to find products.

The primary concern regarding this information at the moment is spear-phishing campaigns using the stolen data.

Customers are urged to treat all further ASOS communications with caution. Mass phishing attempts, customised based on user's details and search history, may lead to fraud or data stealing malware.

The root cause of the incident at this time is believed to be social engineering. This places the incident in the same category as the British retail incidents that occurred in 2025.

ASOS is responsibly communicating the status of the investigation into the breach to customers and stakeholders. Integrity360 is monitoring the situation, with further details on the incident expected to be available soon.