Snowflake 2024 Breaches: 165+ Organizations Compromised via Stolen Credentials

The Snowflake incident was a campaign targeting customers who had not enabled multi-factor authentication. Major victims included AT&T (110 million call records), Ticketmaster (560 million customers), Santander (30 million customers).

The breach at Snowflake Customers exposed Hundreds of millions across all companies records through stolen credentials from infostealer malware used to access snowflake accounts lacking mfa. Hundreds of millions across AT&T, Ticketmaster, Santander, and 160+ others The incident highlights the ongoing challenges organizations face in protecting sensitive user data against increasingly sophisticated attack vectors. Security researchers have noted that breaches of this magnitude often result from a combination of technical vulnerabilities and organizational failures in security practices.

Current status: 165+ companies affected; one suspect arrested; Snowflake mandated MFA. Affected users should take immediate steps to protect their accounts, including changing passwords, enabling multi-factor authentication, and monitoring financial accounts for unauthorized activity. Filing a DSAR with Snowflake Customers can help you understand what data was exposed and request its deletion.