It was an unauthorised push notification apparently sent by hackers trying to extort the online retailer. On the morning of Tuesday, October 6, 2026, ASOS app users across the UK saw a pop-up reading: “Dear ASOS DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it,” with a link to a Telegram account. ASOS emailed customers to apologise, told them to ignore the message and not click the link, and said it had acted immediately to restrict the attackers’ access.
ASOS later said the data involved may include basic personal information such as names and contact details, but that it did not believe payment-card information or account passwords were affected. The data storage company Snowflake told the BBC it had found no compromise of its own platform. Receiving the notification does not mean your phone was hacked; the advice is to change your ASOS password (and any reused passwords), turn on two-step verification for important accounts, and be wary of follow-up emails, texts or calls claiming to be from ASOS.
Source: BBC News: What can I do to protect myself after ‘Asos hacked’ message? (October 6, 2026).
Image: ASOS warehouse from Darfield (file photo), by Steve Fareham, CC BY-SA 2.0, via Wikimedia Commons.