Overview
- Users worldwide received a push notification from the ASOS app on Tuesday that read: “Dear Asos DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it.”
- The alert included a link to a newly created Telegram group called Xuanye Gateway and was verified by multiple outlets and user screenshots.
- ASOS has not confirmed any breach and investigators are working to determine how the notification was sent and whether the company’s Snowflake account or other systems were actually accessed.
- Hundreds of customers reported app problems on Downdetector, and ASOS shares fell about 10–11% in early trading after the message appeared.
- If customer personal data are found to be exposed, UK rules would generally require ASOS to notify the Information Commissioner’s Office quickly and to inform affected people where the breach poses a high risk.