Canadian national Connor Riley Moucka, 26, pleaded guilty to his role in a large-scale data theft campaign targeting Snowflake cloud storage accounts. Between February and October 2024, Moucka and co-conspirator John Erin Binns exploited accounts lacking MFA protection using credentials stolen via infostealer malware, breaching at least 165 organizations including AT&T, Ticketmaster, and Santander. The attackers stole terabytes of sensitive data — including SSNs, passport numbers, financial records, and call logs — affecting over 100 million individuals. Victims suffered more than $9.5 million in losses, while the attackers extorted at least $2.5 million in bitcoin and sold stolen data on hacker forums. Moucka faces up to 32 years in prison and is scheduled for sentencing on October 27. Following the breaches, Snowflake mandated MFA enforcement and stronger password requirements.
