hackers had "compromised a Snowflake instance".
ASOS customers have been warned to remain vigilant after an unauthorised message claiming the retailer had been hacked appeared through its app.
The notification appeared on users’ phones on October 6, 2026 and claimed hackers had “compromised a Snowflake instance”.
It also threatened to leak information unless ASOS engaged with the group behind the message.
The notification included a link to a Telegram channel, which customers have been urged not to click.
ASOS later apologised to customers and said it had taken immediate action to restrict the apparent hackers’ access.
The retailer said it was investigating the incident with advisers and relevant authorities.
Snowflake, the data storage company named in the message, said its own investigations had found no compromise of its platform.
ASOS has said it is currently unclear what information, if any, may have been accessed during the incident.
The retailer told customers that basic personal information, including names and contact details, may have been affected.
However, it said there was no indication that payment card information or account passwords had been compromised.
ASOS customers who received the notification have therefore been advised to take several precautions.
The first is to avoid clicking the Telegram link or engaging with anyone connected to the message.
Customers should also consider changing their ASOS password, particularly if they use the same password for other accounts.
Using different passwords across online accounts can help reduce the potential impact if one account is compromised.
Customers are also advised to enable two-step verification on important accounts, including email and banking services.
They should monitor their bank and online accounts for unusual activity, although there is currently no indication that payment card information was affected.
Cybersecurity experts have warned that criminals could attempt to exploit the situation by sending convincing follow-up messages.
These could include fake password reset requests, refund offers, compensation claims or delivery notifications.
Customers should therefore be cautious of unexpected emails, texts or calls claiming to be from ASOS.
Anyone receiving a suspicious call should end the conversation and contact the retailer independently through its official website or app.
Customers should also avoid downloading software or providing personal information if asked to do so through an unexpected message.
ASOS has said its website and app remain operational, with customers able to continue shopping as normal.
The retailer is expected to provide further information as its investigation continues.
For now, customers who received the notification are being encouraged to remain cautious and only access their accounts through official ASOS channels.
