daily cyber × ai intelligence

← threat actors

threat actor

Xuanye Group

1 story · 1 in the wild · October 7, 2026 – October 7, 2026

evidence: 1 observed

sectors

  • retail 1 · Oct 7

attack phases seen

  • Exfiltration 1 · Oct 7
  • Initial access 1 · Oct 7

what we reported, newest first, grouped by story

October 7, 2026

  • ASOS customers received an in-app push notification titled "ASOS HACKED" at around 10am UK time on October 6, addressed to the retailer's DPO and IT team and pointing to a Telegram channel. An actor calling itself Xuanye Group claims full compromise of ASOS's Snowflake instance; ASOS told the market it is investigating unauthorised activity on third-party customer-communication platforms, that names and contact details may have been accessed, and that it does not believe card data or passwords are affected (BleepingComputer, NCSC-UK) (discussion). · Oct 7 · observed · Identity, Certificates & Cloud