--- title: Asos confirms breach of customer data after hackers send... description: UK fashion retailer Asos confirmed hackers breached customer personal data, including names, home addresses, phone numbers, emails, and website search queries.... canonical: https://daily.dev/posts/asos-confirms-breach-of-customer-data-after-hackers-send-rogue-app-notification-hlvqjtmks twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Asos confirms breach of customer data after hackers send rogue app notification | daily.dev og:description: UK fashion retailer Asos confirmed hackers breached customer personal data, including names, home addresses, phone numbers, emails, and website search queries.... og:url: https://daily.dev/posts/asos-confirms-breach-of-customer-data-after-hackers-send-rogue-app-notification-hlvqjtmks og:image: https://api.daily.dev/og/posts/HLVQJTMKS.png og:image:alt: Asos confirms breach of customer data after hackers send rogue app notification og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Asos confirms breach of customer data after hackers send rogue app notification **[TechCrunch](https://daily.dev/sources/tc)** · 2 min read · 0 upvotes · 0 comments ## Summary UK fashion retailer Asos confirmed hackers breached customer personal data, including names, home addresses, phone numbers, emails, and website search queries. The attackers, calling themselves Xuanye Group, broke into a third-party Snowflake instance used by Asos by impersonating a trusted contact to steal login credentials, then abused Asos's own app notification system to send customers a message claiming they had "fully compromised" the company's data and threatening to leak it unless Asos engages with them. Snowflake says its own systems were not breached. It's unclear whether MFA protected the Asos Snowflake instance or how attackers gained access to the push notification system. Asos has about 17 million customers. The incident echoes an earlier Betterment breach where hackers used a compromised third-party marketing platform to send a fake crypto scam to customers. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How did hackers breach Asos customer data through Snowflake? Hackers impersonated a trusted contact to obtain login credentials and used them to access a Snowflake instance that Asos used to host customer data for communications. They stole names, home addresses, phone numbers, email addresses, and notes on customer profiles like website search queries. Snowflake itself reported no breach of its own systems; the compromise was specific to Asos's instance. _Teams relying on third-party data platforms follow breach disclosures like this one on daily.dev to spot credential-theft patterns early._ ### Why did Asos customers get a strange push notification about a data breach? Hackers who go by the handle Xuanye Group gained unauthorized access to Asos's in-app push notification system and sent customers a message addressed to Asos's data protection officer and IT department, claiming they had "fully compromised" data hosted on Snowflake and threatening to leak it unless Asos engaged with them. It remains unclear how they accessed the notification system, which is often run by a third-party service. _Developers managing third-party notification pipelines track incidents like this on daily.dev to harden their own integrations._ ## Similar posts on daily.dev - [Zara data breach exposed personal information of 197,000 people](https://daily.dev/posts/zara-data-breach-exposed-personal-information-of-197-000-people-v24mdsfne) · BleepingComputer · 0 upvotes · 0 comments - [Snowflake customers hit in data theft attacks after SaaS integrator breach](https://daily.dev/posts/snowflake-customers-hit-in-data-theft-attacks-after-saas-integrator-breach-v9c1wyxhi) · BleepingComputer · 0 upvotes · 0 comments - [Someone went shopping in ASUS's eShop – for customer data](https://daily.dev/posts/someone-went-shopping-in-asus-s-eshop-for-customer-data-fxn56ddrc) · The Register · 0 upvotes · 0 comments - [LastPass says hackers stole customer data through a supply chain breach at Klue](https://daily.dev/posts/lastpass-says-hackers-stole-customer-data-through-a-supply-chain-breach-at-klue-cot1tyrco) · The Next Web · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#data-breach](https://daily.dev/tags/data-breach), [#snowflake](https://daily.dev/tags/snowflake) [View this post on daily.dev](https://daily.dev/posts/asos-confirms-breach-of-customer-data-after-hackers-send-rogue-app-notification-hlvqjtmks) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Asos confirms breach of customer data after hackers send rogue app notification","url":"https://daily.dev/posts/asos-confirms-breach-of-customer-data-after-hackers-send-rogue-app-notification-hlvqjtmks","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/asos-confirms-breach-of-customer-data-after-hackers-send-rogue-app-notification-hlvqjtmks"},"datePublished":"2026-10-08T15:02:17.783Z","dateModified":"2026-10-08T16:29:13.512Z","description":"UK fashion retailer Asos confirmed hackers breached customer personal data, including names, home addresses, phone numbers, emails, and website search queries....","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b8824a7e8eee27f1692bd592c0f45cc3?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b8824a7e8eee27f1692bd592c0f45cc3?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"TechCrunch","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"TechCrunch","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/tc","url":"https://daily.dev/sources/tc"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/asos-confirms-breach-of-customer-data-after-hackers-send-rogue-app-notification-hlvqjtmks","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,data-breach,snowflake","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"TechCrunch","item":"https://daily.dev/sources/tc"},{"@type":"ListItem","position":3,"name":"Asos confirms breach of customer data after hackers send rogue app notification"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/asos-confirms-breach-of-customer-data-after-hackers-send-rogue-app-notification-hlvqjtmks#faq","mainEntity":[{"@type":"Question","name":"How did hackers breach Asos customer data through Snowflake?","acceptedAnswer":{"@type":"Answer","text":"Hackers impersonated a trusted contact to obtain login credentials and used them to access a Snowflake instance that Asos used to host customer data for communications. They stole names, home addresses, phone numbers, email addresses, and notes on customer profiles like website search queries. Snowflake itself reported no breach of its own systems; the compromise was specific to Asos's instance. Teams relying on third-party data platforms follow breach disclosures like this one on daily.dev to spot credential-theft patterns early."}},{"@type":"Question","name":"Why did Asos customers get a strange push notification about a data breach?","acceptedAnswer":{"@type":"Answer","text":"Hackers who go by the handle Xuanye Group gained unauthorized access to Asos's in-app push notification system and sent customers a message addressed to Asos's data protection officer and IT department, claiming they had \"fully compromised\" data hosted on Snowflake and threatening to leak it unless Asos engaged with them. It remains unclear how they accessed the notification system, which is often run by a third-party service. Developers managing third-party notification pipelines track incidents like this on daily.dev to harden their own integrations."}}]} ```