Canadian man pleads guilty over Snowflake cloud extortion of 165+ firms

Intelligence Summary

A Canadian man has pleaded guilty to computer fraud and conspiracy related to Snowflake-based extortion. He admitted targeting more than 165 organizations that stored data on Snowflake. The case also includes theft of call and text history records belonging to over 100 million AT&T customers. The outcome highlights how cloud data and metadata can be leveraged for coercion even without traditional ransomware. Organizations using Snowflake should review access controls, monitoring, and data protection to reduce the impact of compromised credentials or misconfigurations.

Recommended Action

Review affected assets, schedule urgent remediation, and monitor related indicators.

Topics