Snowflake attacker pleads guilty to hack of 165 companies’ data

A Canadian hacker pleaded guilty to participating in coordinated attacks on 165 organizations using Snowflake, stealing billions of sensitive records and extorting millions of dollars from victims including AT&T, Ticketmaster, and Neiman Marcus. This case demonstrates the critical vulnerability of cloud data warehouses to credential-based attacks and highlights the evolving threat landscape where attackers exploit inadequate access controls to compromise massive datasets. CIOs must recognize this as a watershed moment for cloud security strategy, signaling that traditional perimeter defenses are insufficient and that comprehensive identity governance, multi-factor authentication, and behavioral monitoring are now essential operational requirements.