Snowflake Hacker Pleads Guilty After Breaching 165 Companies and Stealing Billions of Records

Connor Riley Moucka pleaded guilty to a widespread hacking and extortion campaign that, between February and October 2024, used stolen login credentials to compromise at least 165 customers of a U.S.-based cloud SaaS provider (reported to be Snowflake), stealing billions of sensitive records (including financial, PII, and DEA registration numbers), downloading terabytes of data, extorting victims for millions of dollars, selling information on cybercrime forums, causing over $9.5M in direct losses and exposing data tied to over 100 million individuals; Moucka faces multiple charges and up to 30 years in prison, and the case highlights the attackers’ reliance on accounts lacking multi-factor authentication.