#snowflake
3 cases
A U.S. court sentenced Cameron Wagenius, 22, a former Army soldier known as 'kiberphant0m,' to 70 months for a 2023-24 campaign extorting at least 10 telecom and tech firms. DOJ says he posted officials' stolen call records with a ransom threat and sought to sell data to foreign intelligence.
ShinyHunters says it vished McKesson employees, took over Okta sessions, and pulled a terabyte from Salesforce and Snowflake between 20 and 25 August 2026. McKesson has confirmed exfiltration of patient data and nothing about how.
A financially motivated threat actor (UNC5537) compromised Snowflake customer instances across 165+ organizations by credential stuffing against accounts lacking MFA, exfiltrating terabytes of sensitive data, and conducting mass extortion — the largest cloud data warehouse compromise to date.