Connor Moucka, a 26-year-old Canadian hacker known online as Waifu and Judische, has pled guilty to hacking more than 165 companies via Snowflake's cloud platform, stealing billions of records. Victims included AT&T (100M+ customers), LendingTree, and Ticketmaster. Moucka and accomplices collected over $2.5 million in ransom payments and an additional ~$500,000 selling stolen data on BreachForums. Total victim losses reached $9.5 million according to the DOJ. Moucka faces sentencing on October 27 and could receive decades in prison.
Questions this post answers
How much did the Snowflake hackers make from ransom payments and data sales?
Connor Moucka and his accomplices received more than $2.5 million in ransom payments over the course of the campaign. Moucka also earned around $500,000 separately by selling stolen victim data on hacking forums including BreachForums. Total losses suffered by victims reached $9.5 million, according to the U.S. Department of Justice. Developers and security teams managing cloud data exposure track incidents like this on daily.dev.
How many companies were affected by the Snowflake data breach campaign?
More than 165 companies were compromised in the Snowflake hacking campaign. Notable victims included AT&T, from which over 100 million customers' call and texting records were stolen, as well as LendingTree and Ticketmaster. Banking information, driver's license numbers, and Social Security numbers were also taken in related breaches. Teams evaluating cloud storage security posture find coverage of incidents like the Snowflake breach on daily.dev.