Snowflake Inc. controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile2 entries
2026
ASOS confirms customer data breach linked to stolen employee credentials
Issue disclosure
UK fashion retailer ASOS notified customers that a threat actor had accessed personal and customer account data in an October 6 data breach, and confirmed in an October 8 email that payment information was not compromised and that operations were not affected. ASOS discovered the attacker obtained an employee's login credentials by impersonating a trusted contact and used them to access information on certain third-party platforms used by ASOS, which enabled the threat actor to send a legitimate-looking push notification to customers. In a London Stock Exchange statement published on October 6, ASOS said it is investigating the third-party platforms used to communicate with customers. Snowflake said it began an investigation after becoming aware of the push notification and found no compromise of its platform, while the threat actor, using the names 'Xuanyewen' and 'Xuanye group,' told the BBC that a Simon AI instance was compromised to gain access to the data; the BBC did not say whether the sample data it received had been verified by cybersecurity experts.
Company response
Investigation — ASOS
published on October 6, ASOS said they are investigating third-party platforms which were used to communicate with customers.
Ongoing disclosure — ASOS
UK fashion retailer ASOS has notified customers the threat actor had accessed personal and customer account data following the October 6 data breach.
Clarification — ASOS
ASOS also confirmed that payment information was not compromised and that the incident has not affected operations.
Investigation — Snowflake
that the company began an investigation as soon as it became aware
Source excerpt
published on October 6, ASOS said they are investigating third-party platforms which were used to communicate with customers.
ASOS discovered that the attacker had gained access to an employee account “by impersonating a trusted contact to obtain log in credentials.”
we have found no compromise of the Snowflake platform
2024
Customer credential theft and extortion campaign
ShinyHunters targeted numerous Snowflake customers in a campaign involving stolen credentials, data theft, and extortion. Reported affected organizations included Ticketmaster, Santander Bank, Advance Auto Parts, Neiman Marcus, LendingTree, AT&T, Pure Storage, and Bausch Health. Snowflake and Mandiant said their investigation found no evidence that Snowflake’s own production environment had been breached, attributing the incidents to compromised customer credentials and account-security weaknesses.