Hudson Rock yanks report fingering Snowflake employee creds snafu for mega-leak

The article analyzes claims that criminals exfiltrated large volumes of customer data from Snowflake-hosted accounts (including Ticketmaster and Santander) by using stolen credentials obtained via infostealer malware or other means; Snowflake denies a platform-wide breach, stating a limited number of customer accounts lacking MFA may have been accessed, and has published IOCs and urged customers to enable MFA. Hudson Rock retracted a report alleging compromise of Snowflake's underlying systems under legal pressure, while threat actors (and brokers like ShinyHunters) have been linked to data sales and extortion demands; investigations and customer notifications are ongoing.