logo

Army soldier linked to Snowflake attack spree allegedly tried to sell data to foreign spies

ID: c981bfdb-654c-5bc3-9881-7f25c8ff6cda

STIX ID: report--c981bfdb-654c-5bc3-9881-7f25c8ff6cda

Feed Name: CyberScoop

Threat Score
78/100

Date Published: 2025-02-27

Date Updated: 2026-04-21

Author: Matt Kapko

...
...

U.S. authorities allege that a 21-year-old Army soldier, Cameron Wagenius, stole and attempted to sell sensitive phone records—some tied to a wider Snowflake-related breach—and tried to extort AT&T for $500,000 while communicating with what he believed was a foreign intelligence service; court documents show device seizures, evidence of thousands of stolen IDs and cryptocurrency, links to co-conspirators indicted for cloud intrusions, and behavior suggesting intent to flee and possible defection, raising both criminal and national-security concerns.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.