ASOS apologised after customers received a phone alert claiming it had been hacked, as the retailer said customer information may have been accessed.
ASOS’s cyber incident reached customers through an unexpected channel: a phone alert warning that the fashion retailer had been hacked. The company apologised and urged recipients to disregard the message. ASOS said customer information, including names and contact details, may have been accessed.
The episode highlights a vulnerability beyond a company’s main website or app. Customer communications can rely on separate notification platforms, and unauthorised activity involving those systems can create a security crisis even when a retailer’s core digital storefront remains available. The reports do not establish how the activity occurred, how many customers were affected or whether the alert itself was sent through a compromised service.
ITV reported that the incident involved third-party platforms used to communicate with customers, rather than disruption to ASOS’s core website or app; both were operating normally. ASOS said it had restricted access to the notification platforms and was working with specialist advisers and relevant authorities. The precise technical boundary of the incident has not been publicly established, leaving open questions about which systems were reached and what safeguards were in place.
The National Cyber Security Centre, part of Britain’s GCHQ, offered ASOS assistance, according to chief executive Richard Horne, as reported by The Standard. Horne advised recipients not to click suspicious links or engage with messages exploiting the incident. That warning matters whenever a real security event gives criminals an opening to circulate convincing follow-up messages. A message appearing amid a breach can borrow the credibility of the news and pressure customers into handing over credentials or personal information; the reports do not say that such follow-up fraud occurred here.
Snowflake also entered the public discussion. The Standard reported that the company said its investigation found no compromise of its platform, while the inquiry remained ongoing. That statement does not establish that Snowflake was involved in ASOS’s incident, and the available reporting provides no evidence of a breach of Snowflake systems connected to the retailer. The distinction is important: a company named in coverage is not necessarily a compromised supplier or a cause of the event.
Telegram messages were reported in connection with the episode. Claims attributed to the operators—including an assurance that customer information was safe—were unverified. They do not establish the data’s status or the senders’ identity. The available reports do not show who sent the messages, whether they had access to ASOS systems, or whether the activity was criminal, politically motivated or state-directed. An assertion from an unknown party is not a substitute for an independent forensic finding.
That uncertainty matters because cyber operations can serve purposes ranging from fraud and extortion to espionage and disruption. But the facts available here do not support describing the ASOS incident as a nation-state operation. Assigning responsibility without forensic evidence would blur the distinction between a confirmed security incident and an adversary’s attempt to exploit its publicity. In a geopolitical environment where governments and criminal groups both use digital infrastructure, careful attribution is a security requirement, not a reason to minimize a breach.
For companies operating across borders, the case also shows how digital sovereignty is tested through everyday infrastructure: platforms that hold customer details, send alerts and connect businesses to users. A company’s defenses depend not only on its own systems but also on services it relies upon. Public reporting has not answered which system was accessed, what information was exposed or whether customers face continuing risk. Until those points are clarified, customers and outside observers have limited grounds to assess the incident’s reach.
ASOS told shareholders it had cybersecurity insurance, but said it was too early to quantify any trading impact, according to The Standard. The investigation’s findings should clarify the affected systems, the data involved and what protections failed. They may also establish whether the notification platforms were the point of entry or simply part of the response. For now, the incident is a warning about the consequences of compromised communications—not proof of a broader campaign or an attack on ASOS’s core platform.
Ryan Mitchell serves as a Staff Writer for Just Right News, where he anchors the desk for Cyber, Technology Policy, and Digital Sovereignty. In an era where the digital landscape has become as much a battlefield as any physical territory, Ryan provides a critical conservative lens on the forces shaping the future of American innovation and national security. His work is defined by a commitment to the idea that American leadership in the digital age is not just a matter of economic success, but a necessity for the preservation of global liberty.
Born and raised in Austin, Texas, Ryan’s perspective is deeply rooted in the Lone Star State’s tradition of independence and skepticism of centralized authority. Growing up in a city that transformed from a quiet state capital into a global technology hub, he witnessed firsthand the disruptive power of the tech industry. This upbringing instilled in him a firm belief in free-market principles and the necessity of protecting individual liberties from both government overreach and corporate overstep. His Texan background serves as a foundational compass, guiding his reporting toward stories that emphasize national resilience and the preservation of constitutional values in an increasingly virtual world.
Now based in San Francisco, California, Ryan operates from the epicenter of the very industry he scrutinizes. Living and working in the heart of Silicon Valley allows him to provide “boots on the ground” reporting that few conservative journalists can match. He navigates the cultural and political complexities of the Bay Area to bring Just Right News readers an inside look at the boardrooms and coding labs where the next generation of digital policy is forged. For Ryan, being stationed in San Francisco is a strategic choice; it allows him to challenge the prevailing ideological monoculture of the tech elite from within their own backyard, ensuring that the concerns of middle America are represented in the conversation about our digital future.
His beat—Cyber, Technology Policy, and Digital Sovereignty—covers the high-stakes world of data privacy, artificial intelligence, and the infrastructure of the modern web. Ryan is particularly focused on the concept of digital sovereignty, arguing that for a nation to remain truly free, it must maintain control over its own technological destiny and critical infrastructure. He frequently explores how international regulations and domestic policies impact the ability of American firms to compete without sacrificing the privacy or security of their citizens.
Central to his current body of work is his featured series, “The New Cold War.” Through this project, Ryan examines the escalating technological rivalry between the United States and its global adversaries. He delves into the complexities of state-sponsored hacking, the global race for semiconductor dominance, and the ideological struggle to define the rules of the internet. Ryan views this competition not merely as a commercial race, but as a fundamental defense of Western values against authoritarian digital models. Through his rigorous reporting and principled analysis, Ryan Mitchell ensures that the readers of Just Right News stay informed about the invisible forces defining the 21st century, always advocating for a future where technology serves the cause of freedom.