All timelines
CompaniesUnited Kingdom

ASOS says a hacker posing as a trusted contact accessed customers' personal data

26 articles from 10 sources
First reported on Tuesday 6 October 2026 at 05:04 EDT by The Independent·Latest article on Thursday 8 October 2026 at 07:39 EDT

Summary

At around 10am on Tuesday 6 October, users of the ASOS app received a push notification titled 'ASOS HACKED' claiming that hackers had 'fully compromised the Snowflake instance' and threatening to leak it, with a link to the Telegram messaging service. ASOS said it was investigating unauthorised activity involving third-party platforms it uses to communicate with customers, apologised and urged customers to disregard the alert, and its shares fell almost 12% in London. On 8 October, the retailer said an 'unauthorised party' had impersonated a trusted contact to gain log-in details and had accessed some personal information, including names and contact details, while telling customers that payment details and passwords were not compromised. It warned customers about the full extent of the breach after the hackers contacted the BBC, which reported that names, addresses, phone numbers, emails and customer numbers are now in the hands of cyber criminals.

Latest: ASOS said an 'unauthorised party' impersonating a trusted contact had gained log-in details and accessed customers' personal information, and warned them about the full extent of the breach after the hackers contacted the BBC.

Written automatically by an AI from the articles' headlines and descriptions. It can contain errors: follow the links to read the articles.

How it unfolded

  1. Thursday 8 October

    ASOS said an 'unauthorised party' impersonating a trusted contact had gained log-in details and accessed customers' personal information, and warned them about the full extent of the breach after the hackers contacted the BBC.

  2. Wednesday 7 October

    The Independent advised ASOS customers on how to protect their data after the hack, in which, the retailer warned, names and contact details may have been accessed.

  3. Tuesday 6 October

    ASOS confirmed that customer information, including names and contact details, may have been accessed, and issued an apology to customers after the 'hacked' message was sent through its mobile app.