Asos shares plunge 14% after hackers blast 'compromise' alert to millions of app users

Key points

• Asos issued an unauthorised push notification to app users stating that its Snowflake data instance had been fully compromised.
• The company confirmed that basic personal information may have been accessed but believes payment card details and passwords remain secure.
• Asos shares fell by 9.56% by the end of the trading day, having dropped as much as 14% during the session.
• The notification linked to a Telegram channel run by a group named the 'Xuanye Group,' which claimed the data was safe on their servers for a designated period.
• The National Cyber Security Centre (NCSC) is providing assistance to Asos, and the Metropolitan Police are aware of the incident.
• Cybersecurity experts noted that this public extortion tactic is rare and may indicate the hackers were previously ignored or resisted.

Background

This incident follows a series of cyber attacks on major UK retailers in the previous year, including Marks & Spencer, the Co-op, and Harrods. Those earlier breaches led to stock shortages and website closures, highlighting the vulnerability of large retail infrastructure to digital threats. Asos, a prominent online fashion and beauty retailer, has now become the latest target in a wave of high-profile cyber incidents affecting the UK retail sector.

How outlets are covering it

The BBC emphasized the unprecedented nature of the attack, noting that hackers typically operate in secret and that this public notification was likely a tactic to force negotiation after previous attempts were ignored. The Guardian focused on the immediate financial impact, detailing the sharp drop in Asos shares and the specific claims made by the 'Xuanye Group' on Telegram. While the BBC highlighted customer anxiety and the confusion caused by the notification, the Guardian provided more detail on the technical aspects, such as the involvement of the Snowflake cloud platform and the role of the NCSC. All sources agreed that while payment data was likely safe, the breach of basic personal information posed significant risks for customers, including potential phishing attempts.

Why it matters

The incident underscores the growing threat of public cyber extortion tactics, where attackers use mass notifications to pressure companies into negotiations. It highlights the vulnerability of major retailers to data breaches and the potential for such incidents to cause significant financial losses and consumer distrust. The event also serves as a reminder for consumers to be vigilant against phishing attacks that often follow high-profile data breaches, as criminals may exploit the publicity to steal additional information.

What to watch

Asos is expected to continue its investigation with the help of internal and external specialists, as well as relevant authorities. The company has stated that it will provide updates if the situation changes. Customers are advised to monitor for phishing attempts and to reset their passwords as a precaution. The long-term impact on Asos's trading and reputation remains to be seen, as the company noted it was too early to quantify the potential financial impact.