ASOS app users spammed by weird messages after hack

Wait, what's the "Snowflake instance"?
 By 
Stan Schroeder
 on 
ASOS app
Besides fashion, you can also use the app to find out about the hacker group that's apparently taken over the ASOS app. Credit: JUSTIN TALLIS / AFP via Getty Images

UK fashion retailer ASOS has reportedly been hacked, and its customers are finding out about it in an unusual way.

UPDATE: Oct. 7, 2026, 8:30 a.m. ASOS has indeed experienced a cyber security incident. The company's statement is as follows: "ASOS can confirm that, at around 10am today, an unauthorised customer notification was sent to ASOS customers. We are investigating unauthorised activity involving third-party platforms that we use to communicate with customers. We took immediate action to restrict access to the notification platforms and are working with our internal and external specialist advisers, as well as all relevant authorities. Basic personal information including name and contact details may have been accessed. We do not believe that payment-card information or account passwords, were impacted." The company pointed out that its website and app continue to operate as normal.

According to the BBC, shoppers in the UK are being spammed with pop-up messages from within the official ASOS app, seemingly sent by hackers who have seized control over some part of ASOS' IT systems.

"Dear ASOS DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it," reads one message, per an X user posting a screenshot on Tuesday.

Judging by posts on social media, the incident appears to be fairly widespread, with dozens of people reporting that they've received this message.

Snowflake is a data storage company which ASOS may be using, though Snowflake's official website doesn't mention it in its list of partners. ASOS itself hasn't posted anything about the incident through its official channels; Mashable has contacted the company and will update this article when we hear back.

For now, ASOS app users should refrain from using the app and they should definitely not click the link included in the pop-up message. If you must know, the link leads to a Telegram channel of a group called the "Xuanye Group," which has used the channel to brag about hacking ASOS.

Want more tech and digital culture news delivered to your inbox daily or sent straight to your device? Sign up for Mashable's Top Stories newsletter or get Mashable push alerts.

Topics Cybersecurity

Stan Schroeder
Stan Schroeder
Senior Editor

Stan is a Senior Editor at Mashable, where he has worked since 2007. He's got more battery-powered gadgets and band t-shirts than you. He writes about the next groundbreaking thing. Typically, this is a phone, a coin, or a car. His ultimate goal is to know something about everything.

Mashable Potato

Recommended For You
Asos hacked notification: What a snowflake instance is
The Snowflake logo is displayed on a computer screen photographed using a double-exposure technique

Discord messages: How to stop messages from appearing in Google Search
Discord logo

Binance hack update: How the $6.3 billion crypto hack happened
Binance logo

The $6.3 billion Binance hack has been linked to North Korean hackers
In this photo illustration, the Binance logo is displayed on a phone screen adjacent to an image from a crypto exchange on a laptop on October 30, 2026 in London, England. The world's largest cryptocurrency exchange, Binance, experienced a $6.3 billion security exploit yesterday, representing the largest digital asset theft to date.

Did Muse read private texts without permission? Meta says it couldn’t.
Various examples of avatars for Muse, Meta's AI Agent, during the Meta Connect event in Menlo Park, California, US, on Wednesday, Sept. 23, 2026. The event showcases Meta's latest breakthroughs in AI technologies, AI glasses and VR. Photographer

More in Tech
Hurricane Isaias: See Gulf Coast webcams live, including Pensacola, Florida
A truck with emergency lights is parked on a beach as stormy clouds loom above.

Tropical Storm Rachel: Track the storm’s path online
A path projection of Tropical Storm Rachel.

Hurricane Isaias: Track the storm’s path online as landfall looms
A path projection from Hurricane Isaias

Hurricane Isaias: Track the storm’s path online
A path projection from Hurricane Isaias

Tropical Storm Isaias: Spaghetti models track the storm’s path online
A path projection from Tropical Storm Isaias

Trending on Mashable
NYT Connections hints today: Clues, answers for November 1, 2026
Connections game on a smartphone

Wordle today: Answer, hints for November 1, 2026
Wordle game on a smartphone

NYT Connections hints today: Meanings for each word for Nov. 1, 2026
NYT Connections logo.

NYT Strands hints, answers for November 1, 2026
A game being played on a smartphone.

Anthropic takes steps to block Claude from reverse-engineering video games
By Phil Clark
Retro Gamepad Linked to Glowing AI Core Concept Highlighting Machine Learning and Artificial Intelligence in Digital Gaming - stock photo