SYMBOLCOMMON_NAMEaka. SYNONYMS

Xuanye Group  (Back to overview)


Xuanye Group is implicated in a breach at ASOS, utilizing social engineering to impersonate a trusted contact and obtain login credentials. They claimed responsibility for the attack, asserting the theft of customer data while clarifying that financial information was not compromised. The group linked their activities to a Telegram channel and threatened to leak stolen data unless negotiations commenced. They have not provided evidence of the stolen data, despite reportedly sharing it with BBC News.


Associated Families

There are currently no families associated with this actor.


References
2026-10-12 ⋅ Panda Security ⋅ Emil Bachev
ASOS Data Breach: Are Your Details Safe?
Xuanye Group
2026-10-08 ⋅ News4hackers ⋅ Anuj
ASOS Data Breach Exposed: Social Engineering Attack and Credential Theft Revealed
Xuanye Group
2026-10-08 ⋅ The Record ⋅ Alexander Martin
ASOS: Hackers tricked way into employee account before sending rogue push notification
Xuanye Group

Credits: MISP Project