ASOS confirmed unauthorised activity involving third-party platforms used to communicate with customers, and an unauthorised notification was sent on 6 October 2026. The company said basic personal information, such as names and contact details, may have been accessed. The notification’s claim that attackers compromised a Snowflake instance and would leak data has not been confirmed by ASOS.
What happened at ASOS?
At around 10am on 6 October 2026, customers received an unauthorised notification titled “Asos hacked.” Reports said it directed recipients to Telegram and warned that data would be leaked. ASOS confirmed unauthorised activity involving third-party platforms used for customer communications, said it had restricted access to those platforms, and reported that it was investigating with specialist advisers and relevant authorities. ASOS’s regulatory announcement describes the incident; The Guardian’s contemporaneous report describes the notification customers saw.
As an Amazon Associate I earn from qualifying purchases.
The notification’s claim that a Snowflake instance had been compromised is an allegation in the message, not a verified finding. ASOS had not confirmed that claim in its published notices.
Recommended Free Tools
What information may have been affected?
ASOS said basic personal information, including names and contact details, may have been accessed. The company’s preliminary assessment was that payment-card information and account passwords were not affected. This is not a final forensic conclusion: the investigation was ongoing. ASOS’s customer notice contains its current public guidance.
#1 Best Overall
The official notices do not give a confirmed total for affected customers or leaked records. They also do not establish whether data was ultimately published.
What should ASOS customers do?
Ignore the notification and its link
ASOS says customers should disregard the unauthorised notification and not click or engage with its external link. Do not follow links in the notification or use them to contact ASOS. Check the company’s official customer-care notice directly for updates. ASOS said it was not then asking customers to change their ASOS password or take another action; it said it would contact affected customers directly if that changed.
Watch for follow-on scams
The UK National Cyber Security Centre (NCSC) advises ASOS customers to assume they may be affected, even if they did not receive the notification. Be alert for later emails, texts, calls or other messages that use the incident to prompt you to click a link, disclose information or make a payment. Review account activity and treat unexpected requests cautiously. See the NCSC incident alert for its public guidance.
Free tools Windows power users keep installed
One-click scans. No signup required.
Use good account-security practices
The NCSC recommends strong, unique passwords or passkeys and two-step verification as general account protections. These are sensible safeguards, but ASOS’s notice did not say customers needed to change their ASOS passwords in response to this incident.
What is still unknown?
At the time of the published notices, ASOS’s investigation was ongoing. The notices did not establish who sent the unauthorised notification, the exact technical route used, whether attackers accessed a Snowflake environment, the full categories or number of records involved, or whether any data was published. Those points should not be treated as settled until ASOS or relevant authorities provide verified findings.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Can customers still use ASOS?
ASOS said its website and app remained available and customers could continue shopping normally. That availability does not establish the final scope of the incident; use official ASOS channels for any subsequent updates.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
