Payabl. CPO Warns Retailers on Customer Trust Following ASOS Notification Hack
By Lauren Towner · 6 October 2026

Quick Summary
The recent ASOS cyberattack highlights a dangerous shift in hacking tactics, where retailer notifications were weaponized against customers. Payment provider payabl. emphasizes that ecommerce security must evolve to protect the entire customer journey, as trust remains the most critical asset for digital merchants.
How Does the ASOS Cyberattack Impact Ecommerce Security?
The ASOS cyberattack represents a significant escalation in how hackers target consumers. By hijacking push notifications, attackers bypassed traditional silent data theft to place ransom messages directly on user screens. This breach of the trusted mobile environment forces retailers to re-evaluate their third-party integrations and app security protocols. Breno Oliveira of payabl. notes that "the explosive growth of ecommerce has given hackers more avenues for attack," specifically through loyalty schemes and data platforms.
- Weaponized Notifications: Hackers used internal tools to send direct ransom messages.
- Data Proliferation: More personal data is stored across apps and marketplaces than ever before.
- Consumer Vigilance: Shoppers are urged to treat unexpected app messages with the same suspicion as phishing emails.
What Can Retailers Do to Protect Customer Trust?
Maintaining customer trust requires a proactive rather than reactive security stance. As the number of digital touchpoints increases, merchants must implement real-time monitoring and AI-driven detection to identify anomalies before they reach the end-user. Oliveira suggests that security must cover "every step of the customer journey from login to checkout." Failing to secure these points can lead to irreparable reputational damage and long-term financial loss for high-profile UK retailers.
FF NEWS TAKE:
The ASOS incident isn't just another data breach; it is a psychological breach. When a brand's own app becomes the delivery mechanism for a threat, the ecommerce security model is fundamentally challenged. Payabl. is right to highlight that trust is fragile. For the fintech and payments industry, this serves as a wake-up call that transactional security is no longer enough—platform integrity is now the primary battleground for merchant success.
Companies in this story: payabl.
People in this story: Breno Oliveira