Breaches · 5h ago

Snowflake Credential Abuse Lands Soldier 70-Month Sentence

A U.S. Army soldier, Cameron John Wagenius, was sentenced to 70 months in federal prison for stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 and for extorting telecom companies.

Prosecutors said Wagenius and co-conspirators pulled data from Snowflake tenants that already had exposed credentials and did not enforce multi-factor authentication. They did not need to break into AT&T’s network; logging into the cloud data platform was enough to reach bulk customer metadata and copy it at scale.

The case lands as a law-enforcement milestone, but the exposure it exposes is an identity one: any organization that leaves high-value data reachable through standing cloud credentials without MFA can inherit the same failure mode, even when its core systems were never touched.

Timeline

Sources

2 sources covering this story

Entities

Part of the PlainSec briefing for 2026-09-28

Editions

Related stories