Asos Hacking: Data Breach Extends to Personal Data

What's happened

Asos has identified a breach affecting basic personal data via a third-party platform. Names, addresses, phone numbers, emails and customer search queries may have been accessed. Snowflake reports no platform compromise. Investigations and advisories are ongoing.

What's behind the headline?

Context and Impact

• The breach expands beyond basic contact details, including customer search queries and profiles.
• Snowflake’s denial of a platform breach raises questions about the extent of access and how push notification systems were exploited.
• Shoppers face increased risk of phishing and social-engineering scams as attackers leverage visible data.

What this signals for readers

• Retail platforms relying on third-party services are exposed to cascading data-risk.
• Consumers should monitor accounts and remain skeptical of unsolicited messages claiming to be from ASOS.
• The incident underscores the need for robust MFA and access controls in third-party integrations.

How we got here

The incident began when hackers exploited a third-party platform used by Asos to reach customers. The claimed breach targeted Snowflake-hosted data and involved impersonating a trusted contact to gain login credentials. Snowflake says its systems remain uncompromised. The breach is unfolding amid heightened retail cyber-risk and prior similar incidents.

Our analysis

The Guardian notes the drop in ASOS stock and the push-notification exploit. BBC Business reports on the initial hoax push and subsequent warnings. BBC News and BBC Tech Decoded provide ongoing updates. Business Insider UK highlights explicit attacker messages and the involvement of Snowflake. TechCrunch covers the breach through a third-party platform. The BBC also references industry quotes on phishing risks.

Go deeper

• What concrete steps should ASOS shoppers take right now?
• How might third-party platform access be tightened to prevent a repeat?
• What will regulatory scrutiny look like for retailers using Snowflake or similar services?

More on these topics

• Asos - Village in Cephalonia, Greece

  Asos is a village on the west coast of the island of Cephalonia, Greece and is located 36km north of Argostoli. It is part of the municipal unit Erisos.

• Snowflake Inc. - Corporation

  Snowflake Inc. is a cloud-based data-warehousing startup that was founded in 2012. It has raised more than $1.4 billion in venture capital, and is based in San Mateo, California.

• United Kingdom - Country in Europe

  The United Kingdom of Great Britain and Northern Ireland, commonly known as the United Kingdom or Britain, is a sovereign country located off the north­western coast of the European mainland.

• British Broadcasting Corporation - Broadcasting company

  The British Broadcasting Corporation is a British public service broadcaster. Headquartered at Broadcasting House in Westminster, London, it is the world's oldest national broadcaster, and the largest broadcaster in the world by number of employees.