An apparent extortion threat delivered through ASOS's own mobile app has raised fears that alleged attackers may have reached both customer data and the systems the retailer uses to communicate with shoppers.
ASOS began investigating on 6 October 2026 after users received an 'ASOS hacked' notification. Addressed to the company's data protection officer (DPO) and information technology team, the message claimed the sender had 'fully compromised' an ASOS Snowflake instance and warned, 'Engage with us, or we will leak it.'
