Skip to content
Welcome, thoughtbot's Giant Robots listeners!Start here
Snowflake
AI-generated illustration
OrganisationUS

Snowflake

US cloud data-storage and analytics company.

Snowflake said it found no compromise of its own platform after a rogue push notification sent to ASOS app users on 6 October 2026 named its platform as the source of the breach.

Last refreshed: 12 October 2026 · Appears in 1 active topic

Key Question

Snowflake says its platform was not compromised; so how were ASOS customer details reached?

Timeline for Snowflake

#14 6 Oct

ASOS app pushes rogue alert to customers

Cybersecurity: Threats and Defences
View full timeline →

Background

Snowflake runs a cloud platform that companies use to hold and process their data. Because so many businesses keep customer records there, an attacker WHO claims a Snowflake breach can borrow the platform's name to make a theft look larger than it is.

That is what happened on 6 October 2026. Attackers pushed an alert to ASOS shoppers' phones naming Snowflake as the route into the retailer's data. Snowflake responded that its own systems showed no sign of intrusion. The retailer's version, given to City A.M., blames a staff member tricked by someone posing as a known contact; the stolen login then opened outside services ASOS relies on.

The ASOS case shows the gap between an attacker's claim, sent straight to customers' phones, and what the platform operator says it found. For Snowflake, the exposure sits in customers' own logins rather than in its platform.

Common Questions
Was Snowflake hacked in the ASOS breach?
Snowflake said it found no compromise of its own platform. The claim of a Snowflake breach came from the attackers' push notification to ASOS app users.Source: City A.M.
What does Snowflake do?
Snowflake is a US company running a cloud data platform that businesses use to store and analyse their data.Source: Snowflake
How did attackers reach ASOS data on third-party platforms?
ASOS said an unauthorised party obtained an employee's credentials by impersonating a trusted contact and used them on third-party platforms it uses.Source: City A.M.