Asos Shares Fall 10% After Hackers Hijack App to Send Extortion Alerts

Ransom notes on customer screens

Hijacking a retailer’s push alert pipeline creates an operational headache for digital merchants across Asia-Pacific and Western markets. Intruders usually negotiate data ransoms behind closed doors. By weaponizing an app installed on over 10 million mobile devices, attackers force the victim into a public crisis before forensic teams can map the intrusion.

Vendor integrations create direct exposure for consumer brands using automated tools for customer alerts and data lakes. Here, the commercial risk is not system downtime. The storefront remains live. Instead, the danger lies in app uninstalls, consumer hesitation and friction at the digital checkout during peak shopping quarters.

Earlier data sprees and corporate recovery

Cyber gangs have targeted cloud repositories relentlessly over the past two years. Google subsidiary Mandiant tracked an intrusion campaign targeting Snowflake credentials across at least 165 corporate clients in 2024. British operators have also suffered hits, with Marks & Spencer, the Co-op and Jaguar Land Rover enduring major operational disruption from security breaches.

This breach hits Asos during a delicate corporate turnaround. Asset sales and an improved fiscal 2026 earnings forecast had lifted its share price by more than 60 per cent earlier this year. The group holds cyber insurance covering business continuity. Management noted it is too early to assess the financial impact on trading.

Investigation underway with regulators

Technical teams are now investigating how the payload bypassed internal controls on the notification platform. Asos has not disclosed how many of its 17 million active global customers received the message.

Attention now turns to whether the UK Information Commissioner’s Office receives a formal breach filing once forensic checks conclude. Investors will look to the next trading update to see if customer orders softened after the scare.