Overview
- A notification delivered from the ASOS mobile app at 10:01am BST Tuesday told recipients “we have fully compromised the Snowflake instance” and directly addressed ASOS’s DPO and IT team.
- The app message included a URL to a Telegram group named Xuanye Gateway that was created earlier the same day and the link directs users to a second broadcast channel.
- Because the alert originated inside the ASOS app rather than via a spoofed text, reporters and security watchers say the delivery pattern points to a likely internal system compromise rather than simple brand impersonation.
- Shoppers reported the notification across social media and some users logged issues with the ASOS app on outage tracker Downdetector, with many warning others not to click the link.
- Snowflake is a cloud data warehouse that can hold customer and business records, so the claim raises data‑protection and regulatory risk; ASOS has not yet issued formal confirmation and investigations are under way.