Here's what we know about the suspected Snowflake data extortionists

U.S. prosecutors unsealed an indictment alleging that Connor Riley Moucka and John Erin Binns breached multiple organizations' Snowflake-hosted cloud environments starting around November 2023, stole billions of sensitive records (including financial, identification, and DEA registration data), used a tool dubbed "Rapeflake" to locate and exfiltrate valuable data, and extorted victims—collecting at least $2.5 million and advertising stolen files on underground forums; the case links to threat activity tracked as UNC5537 and possibly related to Scattered Spider, and the suspects have been arrested in Canada and Turkey respectively.