--- title: Canadian Man Pleads Guilty in Snowflake Extortions –... description: Connor Riley Moucka, a 26-year-old Canadian man known online as 'Judische' and 'Waifu,' has pleaded guilty to computer fraud and conspiracy for hacking and... canonical: https://daily.dev/posts/canadian-man-pleads-guilty-in-snowflake-extortions-krebs-on-security-abfigl9xd twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Canadian Man Pleads Guilty in Snowflake Extortions – Krebs on Security | daily.dev og:description: Connor Riley Moucka, a 26-year-old Canadian man known online as 'Judische' and 'Waifu,' has pleaded guilty to computer fraud and conspiracy for hacking and... og:url: https://daily.dev/posts/canadian-man-pleads-guilty-in-snowflake-extortions-krebs-on-security-abfigl9xd og:image: https://api.daily.dev/og/posts/AbfIGl9xd.png og:image:alt: Canadian Man Pleads Guilty in Snowflake Extortions – Krebs on Security og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Canadian Man Pleads Guilty in Snowflake Extortions – Krebs on Security **[Krebs on Security](https://daily.dev/sources/krebsonsecurity)** · 4 min read · 0 upvotes · 0 comments ## Summary Connor Riley Moucka, a 26-year-old Canadian man known online as 'Judische' and 'Waifu,' has pleaded guilty to computer fraud and conspiracy for hacking and extorting over 165 organizations that used Snowflake's cloud storage platform between February and October 2024. The attackers exploited stolen credentials targeting Snowflake accounts without MFA enabled, stealing billions of sensitive records including 100 million AT&T customer call and text histories. Victims included TicketMaster, Lending Tree, Advance Auto Parts, and Neiman Marcus. Conspirators made over $2.5 million in ransom payments. Co-conspirator Cameron 'Kiberphant0m' Wagenius, a U.S. Army soldier, pleaded guilty in July 2025 and faces sentencing in September 2026. A third co-conspirator, John Erin Binns, recently obtained Turkish citizenship, shielding him from extradition. Moucka faces a mandatory minimum of two years and up to 30 years in prison, with sentencing set for October 27. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Who was behind the 2024 Snowflake customer data breaches and extortion campaign? Connor Riley Moucka, a 26-year-old Canadian from Kitchener, Ontario, also known as Judische and Waifu, pleaded guilty to computer fraud, wire fraud, aggravated identity theft, and conspiracy for hacking and extorting more than 165 Snowflake customers between February and October 2024. Co-conspirators included U.S. Army soldier Cameron Wagenius and John Erin Binns, tied to the 2021 T-Mobile breach. _Teams securing SaaS platforms follow breach forensics like the Snowflake case on daily.dev._ ### Why were Snowflake customer accounts vulnerable to the 2024 mass data breach? Hackers used stolen login credentials to access Snowflake customer accounts that did not enforce multi-factor authentication. Victims included TicketMaster, Lending Tree, Advance Auto Parts, and Neiman Marcus. Snowflake later responded by increasing password complexity requirements and enforcing MFA across accounts to prevent similar attacks. _Engineers hardening cloud data platforms against credential attacks track incidents like this on daily.dev._ ### What happened to the hackers involved in the Snowflake and AT&T data extortion scheme? Connor Riley Moucka pleaded guilty and faces sentencing on October 27, with a mandatory minimum of two years and up to 30 years on other counts. Cameron Wagenius pleaded guilty in July 2025 and is sentenced September 3, 2026, facing up to 20 years. John Erin Binns remains free after obtaining Turkish citizenship, which blocks extradition. _Security teams tracking outcomes of major breach prosecutions follow updates like these on daily.dev._ ## Similar posts on daily.dev - [Swiss court sentences 52-year-old Ukrainian ransomware dev to nearly 13 years in the cooler](https://daily.dev/posts/swiss-court-sentences-52-year-old-ukrainian-ransomware-dev-to-nearly-13-years-in-the-cooler-fuxyshnld) · The Register · 0 upvotes · 0 comments - [Scattered Spider Hackers Plead Guilty on Day 1 of Trial – Krebs on Security](https://daily.dev/posts/scattered-spider-hackers-plead-guilty-on-day-1-of-trial-krebs-on-security-eswb9yo0b) · Krebs on Security · 0 upvotes · 0 comments - [Ransom Cartel ransomware creator sentenced to 16 years in prison](https://daily.dev/posts/ransom-cartel-ransomware-creator-sentenced-to-16-years-in-prison-bxk6tbmah) · BleepingComputer · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#authentication](https://daily.dev/tags/authentication), [#data-breach](https://daily.dev/tags/data-breach), [#snowflake](https://daily.dev/tags/snowflake) [View this post on daily.dev](https://daily.dev/posts/canadian-man-pleads-guilty-in-snowflake-extortions-krebs-on-security-abfigl9xd) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Canadian Man Pleads Guilty in Snowflake Extortions – Krebs on Security","url":"https://daily.dev/posts/canadian-man-pleads-guilty-in-snowflake-extortions-krebs-on-security-abfigl9xd","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/canadian-man-pleads-guilty-in-snowflake-extortions-krebs-on-security-abfigl9xd"},"datePublished":"2026-08-06T17:10:03.033Z","dateModified":"2026-09-13T21:08:41.774Z","description":"Connor Riley Moucka, a 26-year-old Canadian man known online as 'Judische' and 'Waifu,' has pleaded guilty to computer fraud and conspiracy for hacking and...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/73b159dce2648db49024cca3b50754d5?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/73b159dce2648db49024cca3b50754d5?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Krebs on Security","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Krebs on Security","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/deb3e417ddef4d0e8cc4d704becf6004","url":"https://daily.dev/sources/krebsonsecurity"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/canadian-man-pleads-guilty-in-snowflake-extortions-krebs-on-security-abfigl9xd","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,authentication,data-breach,snowflake","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Krebs on Security","item":"https://daily.dev/sources/krebsonsecurity"},{"@type":"ListItem","position":3,"name":"Canadian Man Pleads Guilty in Snowflake Extortions – Krebs on Security"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/canadian-man-pleads-guilty-in-snowflake-extortions-krebs-on-security-abfigl9xd#faq","mainEntity":[{"@type":"Question","name":"Who was behind the 2024 Snowflake customer data breaches and extortion campaign?","acceptedAnswer":{"@type":"Answer","text":"Connor Riley Moucka, a 26-year-old Canadian from Kitchener, Ontario, also known as Judische and Waifu, pleaded guilty to computer fraud, wire fraud, aggravated identity theft, and conspiracy for hacking and extorting more than 165 Snowflake customers between February and October 2024. Co-conspirators included U.S. Army soldier Cameron Wagenius and John Erin Binns, tied to the 2021 T-Mobile breach. Teams securing SaaS platforms follow breach forensics like the Snowflake case on daily.dev."}},{"@type":"Question","name":"Why were Snowflake customer accounts vulnerable to the 2024 mass data breach?","acceptedAnswer":{"@type":"Answer","text":"Hackers used stolen login credentials to access Snowflake customer accounts that did not enforce multi-factor authentication. Victims included TicketMaster, Lending Tree, Advance Auto Parts, and Neiman Marcus. Snowflake later responded by increasing password complexity requirements and enforcing MFA across accounts to prevent similar attacks. Engineers hardening cloud data platforms against credential attacks track incidents like this on daily.dev."}},{"@type":"Question","name":"What happened to the hackers involved in the Snowflake and AT&T data extortion scheme?","acceptedAnswer":{"@type":"Answer","text":"Connor Riley Moucka pleaded guilty and faces sentencing on October 27, with a mandatory minimum of two years and up to 30 years on other counts. Cameron Wagenius pleaded guilty in July 2025 and is sentenced September 3, 2026, facing up to 20 years. John Erin Binns remains free after obtaining Turkish citizenship, which blocks extradition. Security teams tracking outcomes of major breach prosecutions follow updates like these on daily.dev."}}]} ```