Asos app users receive hacker notifications, shares drop amid data breach claims

Consensus Summary

Asos customers worldwide received a push notification on Tuesday night claiming hackers had 'fully compromised' the retailer’s Snowflake data platform, triggering a sharp drop in the company’s share price. The message, sent to thousands of users via the Asos app, included a demand for engagement or a threat to leak data, with the headline 'ASOS HACKED' or 'Asos hacked'. All three outlets agree the incident occurred on Tuesday night, though the Guardian suggests the notification was sent earlier in the day, while ABC and 7NEWS emphasize the evening timing. Asos confirmed it was investigating the unauthorized access, with its AI chatbot stating it was 'aware of the notification' and would provide updates. The shares slumped more than 10 per cent according to ABC and 7NEWS, though the Guardian reports an even steeper decline of more than 14 per cent.

The hacker notification exploited Snowflake, a cloud-based data platform used by over 12,000 companies globally, to store and process customer information. The Guardian notes the incident involved basic personal details like names and contact information but claims payment data was not compromised, a claim not directly contradicted by other sources. The ABC highlights the technical nature of the threat, quoting the message: 'We have fully compromised the Snowflake instance. Engage with us, or we will leak it.' Meanwhile, 7NEWS focuses on the social media reaction, with dozens of users from Australia and the UK sharing screenshots of the alarming notification. The timing of the incident—just before 8pm AEDT on Tuesday—was most precisely reported by 7NEWS, while ABC and Guardian use broader phrasing like 'Tuesday night'.

Asos’s response varied slightly across sources, with the Guardian including a direct apology to customers: 'We’re sorry that you may have received an unauthorised push notification from us earlier today.' The ABC and 7NEWS do not quote this apology but confirm the company is investigating. The Guardian also notes involvement from the National Cyber Security Centre (NCSC), which ABC and 7NEWS omit. Additionally, the Guardian provides context about recent cyber incidents affecting British retailers like Marks & Spencer and the Co-op, which experienced stock shortages and website disruptions for 'several weeks' last year. This framing links the Asos incident to a broader trend in retail cybersecurity breaches, though ABC and 7NEWS do not make this connection.

Discrepancies in reporting include the share price drop, with the Guardian’s 14 per cent figure higher than ABC and 7NEWS’s 10 per cent. The Guardian also names the hacker group as the Xuanye Group and references their Telegram channel, details absent from the other outlets. While all sources agree the notification was sent on Tuesday night, the Guardian’s implication that it occurred earlier in the day creates a potential timeline conflict. The ABC and 7NEWS emphasize the technical threat and social media reaction, respectively, while the Guardian adds regulatory and historical context. These differences highlight varying editorial focuses—ABC on the technical breach, 7NEWS on public reaction, and the Guardian on institutional response and broader industry trends.

As of the articles’ publication on October 6, Asos has not confirmed whether customer data was actually compromised, though the Guardian reports the hackers assured customers via Telegram that 'payment information is not affected.' The ABC and 7NEWS do not mention this reassurance. Cybersecurity experts quoted by the Guardian warn of potential phishing attacks targeting Asos customers, while the ABC notes the company’s website remains operational. The Guardian suggests the incident may have been an extortion tactic, a framing not explicitly adopted by the other sources. All outlets agree the situation remains under investigation, with Asos promising updates as more information becomes available. The next steps, as hinted by the Guardian, may include official confirmation of a breach, regulatory involvement, or further cybersecurity advisories for affected customers.