Now Hacked
EN-GB
Data breach

Snowflake customer data stolen using credentials harvested by infostealers

First reported · Last reported · 51 related reports

Credentials linked to infostealer malware were used to steal Snowflake customer data. Several customers, including Ticketmaster, were affected, and Mandiant confirmed significant data theft and attacks aimed at extortion. Lawsuits were subsequently brought against Snowflake, AT&T and Ticketmaster.

Key facts

Affected organisation
Snowflake
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
Significant volumes of data stolen from several customers
Cause / method
Access using customer credentials stolen by infostealer malware
Location
Other countries

If your data was exposed

Exposed dataUsernamePassword

  1. Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.

Timeline

  1. Access to Snowflake customer data through infostealer infections was confirmed.
  2. It emerged that several organisations, including Ticketmaster, had been affected by the Snowflake-related data breach.
  3. Mandiant said a significant volume of data had been stolen from Snowflake customers.
  4. Data breach lawsuits were brought against Snowflake, AT&T and Ticketmaster.
  5. Lawsuits over the Snowflake-related data breach were transferred to Montana.
  6. The US sought the extradition of a Canadian suspected of involvement in the Snowflake data breach.

Also affected by this incident

51 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.