Snowflake Data Breach: Billions of Records Stolen from 165 Companies
Hacker extorted millions from victims using stolen sensitive data.
1Large-Scale Cyber Attack
Between February and October 2024, Connor Moucka accessed cloud data of over 165 companies, stealing billions of customer records. The compromised data included banking information, social security numbers, and DEA registration details. The hacking team used the stolen data as leverage for extortion, earning more than $2.5 million. This incident exposed critical vulnerabilities in cloud security infrastructure that organizations must urgently address.
2Extortion and Repeat Demands
The attackers monetized stolen data by selling it on cybercrime forums and Telegram, with Moucka personally gaining at least $495,000. One particularly disturbing tactic was re-extorting victims who had already paid, using data belonging to a government official's family members as additional pressure. This pattern demonstrates cybercriminals' increasingly aggressive monetization strategies and the need for better victim protection protocols.
3$9.5 Million in Direct Losses
The attacks caused over $9.5 million in direct financial damages and exposed sensitive information linked to more than 100 million individuals. While Snowflake's cloud data platform customers were among the victims, the DOJ press release didn't name the company directly. Beyond immediate costs, the long-term reputational damage and loss of customer trust represent even more significant consequences for affected organizations.
4Multinational Investigation
Moucka's arrest resulted from an international operation led by FBI Seattle, with cooperation from Canadian, Australian, Spanish, Ukrainian, and Turkish authorities. This collaboration highlights the global nature of cybercrime networks. Moucka was extradited from Canada to the U.S. in July 2025. The case underscores the critical importance of cross-border law enforcement coordination in combating sophisticated cyber threats.
5Security Gap: Lack of MFA
Rather than exploiting a zero-day vulnerability, the attackers leveraged stolen credentials from accounts lacking multi-factor authentication (MFA). This basic security oversight enabled one of the largest cloud data theft operations on record. Cybersecurity experts emphasize that implementing MFA could have prevented the breaches, serving as a wake-up call for organizations about fundamental security controls in cloud environments.
6Up to 30 Years Prison Sentence
Moucka pleaded guilty to four charges: computer fraud, wire fraud, aggravated identity theft, and conspiracy. He faces a mandatory minimum of two years for identity theft and up to 30 years for other charges. Sentencing is scheduled for October 27, 2025. FBI officials stated this outcome sends a strong message that cybercriminals will be held accountable regardless of where they operate.
7Industry-Wide Alarm Bells
The Snowflake breach has raised significant concerns across the cloud computing industry. The escalating attacks on data platforms are forcing companies to reevaluate their security postures. Organizations handling sensitive data are particularly motivated to strengthen access controls. Security professionals emphasize the need for continuous security audits and employee training to prevent similar large-scale breaches.
8Global Cooperation in Cybersecurity
The Moucka case proves that combating cybercrime requires transcending national borders. While the FBI's message that criminals will face justice wherever they operate is clear, experts note such operations remain resource-intensive. Strengthening preventive measures and international cooperation mechanisms will be crucial for addressing future cyber threats effectively in our interconnected digital landscape.
Original article: Security Affairs — Snowflake Veri İhlali: 165 Şirketten Milyarlarca Kayıt Çalındı