WASHINGTON, D.C. — Dozens of ASOS app users received a push notification on June 30 that appeared to be sent by hackers, warning of a “security breach” and linking to a suspicious website, prompting concerns among investors and regulators about the retailer’s cyber‑defence posture.

The message, which read “Your ASOS account may be compromised – click here to secure it now,” was reported by users in the United Kingdom, United States and Australia. Preliminary analysis by security firm Mandiant suggests the notification was likely generated by a compromised third‑party push‑service provider rather than ASOS’s own servers, affecting an estimated 78 accounts.

ASOS issued a statement on July 1, saying its internal investigation “has found no evidence of unauthorized access to customer data” and that the push notification was “unauthorised and unrelated to ASOS operations.” The company’s spokesperson, Jenna Clarke, added, “We are working with the service provider to remediate the issue and have already reset the affected tokens.”

Investors reacted cautiously; the London‑listed stock slipped 2.1% in early trading after the incident was disclosed, wiping roughly £120 million from its market value. Analysts at Barclays noted that repeated cyber incidents could pressure the retailer’s cost structure, especially as it expands its digital footprint across Europe and North America.

Regulators in the UK and EU are watching closely. The Information Commissioner’s Office (ICO) reminded firms that “prompt notification of data‑security incidents is a legal requirement” under GDPR. Cyber‑security experts warn that supply‑chain vulnerabilities, such as those in push‑notification services, may become a focal point for future policy proposals.

Key Takeaways

• 78 users reported the fraudulent push notification; no data breach confirmed.
• ASOS stock fell 2.1% following the disclosure, erasing £120 million in value.
• Regulators may tighten oversight of third‑party service providers under GDPR.

While ASOS assures customers that their personal information remains secure, the episode underscores the growing risk that third‑party platforms pose to global e‑commerce firms and highlights the need for stronger contractual safeguards and real‑time monitoring.