Breaches · 5h ago
A U.S. Army soldier, Cameron John Wagenius, was sentenced to 70 months in federal prison for stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 and for extorting telecom companies.
Prosecutors said Wagenius and co-conspirators pulled data from Snowflake tenants that already had exposed credentials and did not enforce multi-factor authentication. They did not need to break into AT&T’s network; logging into the cloud data platform was enough to reach bulk customer metadata and copy it at scale.
The case lands as a law-enforcement milestone, but the exposure it exposes is an identity one: any organization that leaves high-value data reachable through standing cloud credentials without MFA can inherit the same failure mode, even when its core systems were never touched.
2 sources covering this story
US soldier gets 70 months in prison for extorting 10 tech, telecom firms
Army soldier has been sentenced to 70 months in prison for hacking and extorting at least 10 U.S.
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and ordered to pay nearly $300,000 in…
Part of the PlainSec briefing for 2026-09-28