Asos Shares Plunge 13% as Hackers Hijack App to Broadcast Unverified Snowflake Breach

Customers across the UK, US, Germany, and Australia received a push notification titled “ASOS HACKED” through the official Asos app, threatening a massive Snowflake database leak. The threat actor, an unknown entity calling itself "Xuanye Group," bypassed private negotiation entirely and used the retailer's own infrastructure to broadcast the ransom note to both staff and consumers. Asos has not confirmed the compromise, and no actual data samples have been published, but the unverified claim still erased up to 13.2% of the company's stock value intraday. The incident follows a confirmed July 2026 account takeover that exposed details of 138,828 customers via credential stuffing. "If confirmed, this is a deeply serious attack because the hackers appear to have done something particularly brazen: turned Asos’s own app into their ransom note." — Charlotte Wilson