Snowflake attacker pleads guilty to hack of 165 companies’ data
A Canadian hacker pleaded guilty to participating in coordinated attacks on 165 organizations using Snowflake, stealing billions of sensitive records and extorting millions of dollars from victims including AT&T, Ticketmaster, and Neiman Marcus. This case demonstrates the critical vulnerability of cloud data warehouses to credential-based attacks and highlights the evolving threat landscape where attackers exploit inadequate access controls to compromise massive datasets. CIOs must recognize this as a watershed moment for cloud security strategy, signaling that traditional perimeter defenses are insufficient and that comprehensive identity governance, multi-factor authentication, and behavioral monitoring are now essential operational requirements.
A Canadian hacker has admitted being part of a group responsible for several major cyberattacks. Connor Riley Moucka pleaded guilty to being part of a coterie of hackers that hit 165 organizations, resulting in the theft of customer records and the extortion of millions of dollars. Industry sources have identified Moucka as one of the main players in attacks on data hosted by cloud data warehouse Snowflake. Companies affected by the hacks include the likes of AT&T, Ticketmaster and the Neiman Marcus Group. He worked with two other hackers: John Edward Binns and Cameron John Wagenius. Binns was not in US custody as of April 2026, while Wagenius, going by the name of Kiberphant0m, was arrested in January 2025 and pleaded guilty in July that year Moucka and other members of the group used stolen login credentials to compromise data belonging to at least 165 customers of a US-based software-as-a-service company. This unauthorized access was used to steal billions of sensitive customer records and download terabytes of information, “Connor Moucka hacked over 150 companies and organizations, obtained extremely sensitive information, and extorted the victims for millions of dollars. Today’s guilty plea serves as a reminder to all cybercriminals, regardless of where they live, that they cannot hide behind a wall of anonymity. You will be found and brought to justice,” said assistant attorney general A. Tysen Duva of the Justice Department’s Criminal Division The trial is the result of a coordinated worldwide action against the Snowflake group. The investigation was led by the FBI but benefited from contributions from the Royal Canadian Mounted Police, the Australian Federal Police, Spain’s Guardia Civil, the Security Service of Ukraine and the Turkish National Police. This article first appeared on CSO.
