Hacker admits stealing data from 165+ Snowflake customers in extortion scheme

What's the deal? A hacker has pleaded guilty to stealing data from more than 165 customers of cloud data company Snowflake, according to TechCrunchDealroom has a profile for this one. Try Dealroom →. The breaches ranked among the largest data thefts in recent memory, hitting a broad swathe of corporate victims.

How did it happen? The attacker used stolen login credentials to access Snowflake customer accounts that lacked multi-factor authentication. From there, the hacker extracted vast troves of data and then sought to extort the affected companies.

Why it matters: The scale — over 165 organisations — underscores how a single set of compromised credentials can cascade across an entire customer base when basic protections are missing.

The signal: The guilty plea closes a chapter on one of the era's most sprawling breach campaigns, and reinforces a hard lesson for cloud customers: without multi-factor authentication, stolen passwords remain the softest way in.

Read more: TechCrunch - CBC

Image credit: Visual Content