ASOS app users receive push notifications apparently sent by hackers
ASOS app users in the UK received unauthorized push notifications from hackers claiming to have compromised the company's data storage via Snowflake. The hackers are using the app's notification system as a public ransom note to pressure the company.
Why it matters
This incident highlights a brazen new tactic in cyber extortion, leveraging trusted consumer-facing apps to bypass traditional communication channels.
Image source, Getty Images By Joe Tidy Cyber correspondent, World Service Published 6 October 2026, 10:49 BST Updated 37 minutes ago Asos users across the UK have been sent pop-up messages from its app that appear to have been sent by hackers trying to extort the company.
Dozens of people have told the BBC about receiving a strange message from the clothing and beauty store's app, appearing on their phone screens.
"Dear ASOS DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it," the message reads.
Asos did not immediately respond to the BBC's requests for comment.
"If confirmed, this is a deeply serious attack because the hackers appear to have done something particularly brazen: turned ASOS's own app into their ransom note," says Charlotte Wilson, head of enterprise at cyber-security firm Check Point.
Also covering this story
2 other newsrooms covered this event. We read each version separately.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in