Canadian Authorities Arrest Attacker Who Stole Snowflake Data

Canadian authorities arrested a suspect accused of orchestrating a campaign (tracked as UNC5537) that compromised 165 Snowflake cloud accounts by leveraging credentials stolen from info-stealer infections and targeting organizations across industries; victims lacked multifactor authentication and the actor demanded ransoms of $300,000–$5 million for deleting stolen data.