Online Retailer Asos Investigates Cyber Extortion Attack After Unauthorized Push Notification Breach

British online fashion retailer Asos is actively managing the fallout from a cyber extortion incident after customers received unauthorized push notifications announcing a breach. The rogue alerts, addressed directly to the company's data protection officer and IT team, claimed that the attackers had compromised Asos's systems. The intrusion specifically targeted third-party platforms utilized by the retailer to communicate directly with mobile app shoppers.\n\nThe sent notifications stated: "Dear Asos DPO and IT, we have fully compromised the Snowflake instance. Engage with us or we will leak it." The message included a link directing shoppers to a Telegram channel purportedly operated by "Xuanye Group," an entity largely unfamiliar to cybersecurity researchers. Asos issued an official statement noting, "We are investigating unauthorised activity involving third-party platforms that we use to communicate with customers. We took immediate action to restrict access to the notification platforms and are working with our internal and external specialist advisers, as well as all relevant authorities."\n\nSnowflake operates as a major cloud-based data platform handling transaction management, customer demographic metrics, and integration with customer messaging services. While Asos acknowledged that customer names and contact details may have been accessed during the unauthorized intrusion, the company emphasized that it does not believe passwords or financial payment information were exposed. Both the official Asos mobile application and the main shopping website continue to operate normally despite the notification hijacking.\n\nThe breach highlights ongoing vulnerabilities tied to third-party cloud integrations and supply chain cybersecurity across major global e-commerce platforms. Asos continues to collaborate with external cybersecurity advisers and regulatory enforcement agencies to determine the exact perimeter of the data exposure. The incident underscores rising risks where cybercriminals hijack legitimate administrative channels to broadcast ransom demands directly to consumers, elevating public pressure on targeted corporations.