Skip to content
Recent reports suggest ASOS customers have received alarming push notifications through the retailer’s mobile app claiming systems have been compromised and threatening data exposure if demands are not met.
The notification, which appears to have been sent through a trusted customer communication channel, has attracted significant attention because it takes the alleged attack directly to customers rather than keeping communications behind closed doors.
While investigations are ongoing and details remain limited, the incident highlights an increasingly concerning trend in cyber extortion: attackers seeking to create external pressure by taking their message public.
The reported incident has not only generated concern among customers, but has also reportedly affected investor sentiment, with ASOS shares falling following widespread coverage of the alleged attack. The reaction serves as a reminder that the consequences of a cyber incident are rarely confined to technology systems alone.
The shift in attacker behaviour
Cyber criminals are no longer focused solely on encrypting systems or stealing data. Increasingly, they are targeting reputation, customer confidence and public perception.
As organisations become more resilient to technical disruption, attackers are finding new ways to apply pressure. In incidents such as this, the objective can be as much about influencing stakeholders and creating urgency as it is about accessing systems or data.
In situations like this, the attack moves beyond an IT issue and becomes a business resilience challenge.
Why the push notification matters
Most extortion attempts take place behind the scenes through email, private negotiations or dark web leak sites. A customer-facing push notification changes the dynamic entirely. Within seconds, an organisation can find itself dealing with customer concern, media scrutiny and reputational impact, often before the full scope of an incident has been established.
The incident also highlights the importance of securing customer communication platforms and third-party engagement tools. Any system capable of communicating directly with customers has the potential to become a high-impact target if compromised.
For business leaders, this demonstrates why cyber resilience must extend beyond protecting data and infrastructure.
What business leaders should take away
Organisations often focus heavily on preventing compromise, but incidents like this demonstrate the importance of being prepared for what happens after a breach is detected.
Key considerations include:
- Crisis communication planning
- Third-party platform security and monitoring
- Data governance and visibility
- Incident response testing
- Executive-level cyber resilience planning
- Security oversight of customer communication and engagement platforms
Cyber resilience matters
Whether the claims made by attackers ultimately prove accurate or not, the public nature of incidents such as this can have significant consequences for brand reputation, customer trust and stakeholder confidence.
The reported ASOS incident highlights a broader reality: organisations are increasingly judged not only on whether a cyber incident occurs, but on how effectively they communicate and respond once it does.
Those that prepare for both technical and communication challenges are better positioned to maintain trust and minimise disruption during a cyber incident.
David Wing, Managing Director of Zensec, suggests that incidents such as this demonstrate why organisations need to view customer communication platforms as part of their wider cyber resilience strategy:
“The most notable aspect of the reported ASOS incident isn’t necessarily the alleged compromise itself, it’s the apparent use of a customer-facing communication channel. If threat actors can access systems used to communicate directly with customers, they can create immediate reputational pressure while an organisation is still investigating what has happened. Security teams need visibility not only of core infrastructure, but also the platforms used to engage with customers.”
Update: 7 October 2026
Since this article was first published, ASOS has confirmed it is investigating unauthorised activity linked to a push notification sent to customers. The National Cyber Security Centre has since stated that customer names and contact details may have been accessed, although ASOS does not currently believe payment card information or account passwords were affected. The NCSC has also advised customers to remain alert for phishing attempts, scams and suspicious messages that may follow the incident. [
While investigations remain ongoing, the latest information reinforces the wider point raised in this article: cyber incidents increasingly create challenges that extend beyond technical recovery and into customer trust, communications and business resilience.
Source
