ASOS Investigates Unauthorized Customer Alert and Possible Data Access

Online fashion retailer ASOS said an unauthorized notification was sent to customers at around 10 a.m. on Oct. 6 and that it was investigating activity involving third-party communication platforms. In a company release reproduced by 6ix, ASOS said basic personal information, including names and contact details, may have been accessed. It said it did not believe payment-card information or account passwords were affected. Those are the company's preliminary assessments, not a completed forensic finding.

ASOS said it immediately restricted access to the notification platforms and was working with internal and external specialist advisers and relevant authorities. It also said its website and app were operating normally, with no current disruption to operations. The statement separates a possible compromise of customer information and communications from an outage of the shopping service. Continued availability of an app does not resolve the different question of what information may have been accessed.

A Threat Delivered Through the App

TechRadar's contemporaneous coverage described a push alert headed "ASOS HACKED" that customers reported receiving that morning. The publication said the message was addressed to ASOS' data-protection officer and IT team but delivered to customers, and that it linked to a Telegram chat. Its account helps explain why the incident became immediately visible to shoppers rather than emerging only through a later disclosure by the retailer.

The message claimed that a Snowflake instance had been compromised, according to TechRadar. That assertion must be distinguished from ASOS' own account, which described unauthorized activity involving third-party customer-communication platforms. A threatening notification demonstrates that a message reached users; its contents are not independent proof of every technical claim made by its sender. The reviewed company statement did not identify a confirmed root cause or substantiate the full extent of the purported compromise.

TechRadar advised recipients not to click the Telegram link in the threatening notification. That recommendation is specific to the message it reported, rather than evidence that all communications from the retailer were fraudulent. For customers following the incident, the essential distinction in the available reporting is between an attacker's demand, the company's verified statements about its response, and unresolved claims about underlying systems or stolen data.

What the Company Has and Has Not Established

ASOS used qualified language about customer information: names and contact details "may have been accessed," while it did not believe passwords or payment-card information were impacted. Those formulations leave room for an investigation to clarify the scope. The release did not give a confirmed number of affected people, identify every data field involved or provide a detailed explanation of how access to the communication platforms had been obtained.

The retailer also said it was too early to quantify any potential impact on trading and that it would provide updates as appropriate if the situation changed. That limits what can be concluded about commercial consequences from the disclosure alone. The initial statement supports reporting the incident and the response measures, but not assigning a final cost, forecasting an operational shutdown or treating the sender's claimed access as a fully verified breach inventory.

The immediate news is therefore bounded but consequential: customers received an unauthorized message through a channel associated with a retailer, and ASOS acknowledged an investigation into third-party platforms and possible personal-data access. Its initial statement sought to distinguish that risk from payment-card exposure, password compromise and operational disruption. The extent of any actual data access and the route used to send the notification remain questions for evidence beyond the first disclosure.