Pure Storage pwned, claims data plundered by crims who broke into Snowflake workspace

Pure Storage confirmed an unauthorized access to a single Snowflake analytics workspace containing telemetry used for customer support (company names, LDAP usernames, email addresses, and Purity software version). The company says no customer data or array passwords were exposed and that its broader infrastructure remains unaffected; the incident is described alongside Mandiant’s reporting that the UNC5537 group has been exploiting exposed Snowflake credentials—often obtained from historical infostealer dumps—and that lack of MFA is a common factor in many related breaches.