Threats · 53 days ago
The breach was a login problem, not a software break. Once stolen customer credentials worked on Snowflake accounts without MFA, the attackers could act like legitimate users, reach cloud-hosted data, and extort the owners of those accounts; patching the platform would not change that the data had already been copied out.
Connor Riley Moucka pleaded guilty to computer fraud, wire fraud, aggravated identity theft, and conspiracy over a campaign that hit at least 165 organizations and drew more than $2.5 million in ransom payments. Court filings now tie the case to UNC5537 and say the stolen data affected more than 100 million people across targets including AT&T, Ticketmaster, Advance Auto Parts, Santander, Neiman Marcus, and others. The plea is a legal milestone, not a recovery point for the exposed records.
8 sources covering this story
Canadian Man Pleads Guilty in Snowflake Extortions
A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud provider Snowflake.
Hacker pleads guilty to stealing data from more than 165 Snowflake customers | TechCrunch
Connor Moucka pled guilty to hacking and stealing data from more than 165 Snowflake customers, which net him and his accomplices more than $2.5 million in ransom payments.
Snowflake Hacker Pleads Guilty in US Court
Connor Riley Moucka was extradited to the United States in July 2025 after he was arrested in Canada.
Snowflake hacker pleads guilty, faces up to 32 years in prison - Help Net Security
Canadian hacker behind the Snowflake customer account breaches pleaded guilty to stealing data from more than 165 organizations.
Canadian Hacker Pleads Guilty Over Snowflake Extortion Campaign
A Canadian hacker has admitted involvement in the widespread compromise of 165 Snowflake customer accounts used to steal data and extort victims
Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People
Snowflake hacker Connor Moucka pleads guilty over breaches of at least 165 organizations that exposed data tied to at least 100 million people.
Snowflake hacker pleads guilty, faces up to 32 years in prison
Connor Moucka obtained almost $500,000 for playing a key role in one of the most widespread and damaging cyberattack sprees on record.
The Record from Recorded Future
Canadian man pleads guilty to Snowflake hacks that led to 165 breaches
A 26-year-old from Ontario faces as many as 32 years in prison after pleading guilty to fraud, identity theft and conspiracy charges related to the 2024 hacks of cloud platform Snowflake.
Part of the PlainSec briefing for 2026-08-06