Case asos-simon-ai-breach-4af8AI supply chainUnited Kingdom
ASOS data breach: attackers claim compromise of agentic marketing platform Simon AI
ASOS confirmed a breach on 6 October 2026 after an attacker impersonated a trusted contact to obtain an employee's login credentials, then used them to access third-party platforms used to communicate with customers and send a rogue push notification. ASOS said payment information was not compromised. The group calling itself Xuanye Group told the BBC it breached the agentic marketing platform Simon AI to get the data; this is alleged and unverified, and Snowflake said the issue did not result from any flaw in its service.
MediumAttack on AIStatus: Under investigationVerified case file
Open in the interactive mapCite this case
- Reported
- Oct 6, 2026
- Location
- United Kingdom
- Target
- ASOS customer data via Simon AI
- Severity
- Medium
- Verification
- Reported by credible press or researchers
- Triggered by
- Xuanye Group (self-identified, alleged)
- Actor type
- Unknown
- Sector
- Retail & consumer brands
- Reported loss
- None reported
- CVE
- None
What happened
ASOS confirmed a breach on 6 October 2026 after an attacker impersonated a trusted contact to obtain an employee's login credentials, then used them to access third-party platforms used to communicate with customers and send a rogue push notification. ASOS said payment information was not compromised. The group calling itself Xuanye Group told the BBC it breached the agentic marketing platform Simon AI to get the data; this is alleged and unverified, and Snowflake said the issue did not result from any flaw in its service.
Impact: Personal and customer account data accessed, including contact details; payment information not compromised, per ASOS
Who triggered it
Actor: Xuanye Group (self-identified, alleged)
Attribution: The Simon AI link is the attackers' own claim, as reported by Infosecurity Magazine; ASOS cites stolen employee credentials.
Motive: Unknown
How it happened
Attack vector: Stolen employee credentials; compromise of the Simon AI marketing platform (attacker claim)
Root cause: Compromised employee credentials; the role of the third-party AI platform is unconfirmed.
Timeline
- Reported by Infosecurity Magazine
Response
ASOS confirmed the breach.
Current status: Under investigation
Research warnings this case matches
- Seen in real incidents AI systems themselves become targets · International AI Safety Report
- Seen in real incidents Privacy and security · MIT AI Risk Repository
Compared with published AI risk research from several institutes on the Research vs reality page.
Sources (open in a new tab)
- Infosecurity Magazine infosecurity-magazine.com
- Help Net Security helpnetsecurity.com
- The Record therecord.media
Cite this case
ASOS data breach: attackers claim compromise of agentic marketing platform Simon AI. AI Threat Watch, case asos-simon-ai-breach-4af8, Oct 6, 2026. https://aithreat.io/cases/asos-simon-ai-breach-4af8/
Permanent link: https://aithreat.io/cases/asos-simon-ai-breach-4af8/
Related cases
The same type of incident, most recent first.