Advance Auto Parts: 2.3M people's data accessed when crims broke into our Snowflake account

Advance Auto Parts disclosed that an unauthorized third party accessed its Snowflake environment between April 14 and May 24, 2024, exposing personal information for roughly 2.3 million individuals (names, DOBs, Social Security numbers, and driver’s license/ID numbers). The intruder using the alias “Sp1d3r” attempted to sell the data and initially claimed a much larger haul; the company contained the incident, engaged third-party investigators, notified law enforcement, and Snowflake announced broader MFA controls to help prevent similar breaches.