Multifactor Authentication Is Not Enough to Protect Cloud Data

A recent campaign by the UNC5537 extortion group resulted in massive data theft from Snowflake-hosted customers—reported losses include ~560 million Ticketmaster records and ~30 million Santander records—posted for sale and ransom; Mandiant attributes the incidents to compromised customer credentials and insufficient MFA/identity controls rather than a Snowflake platform breach, and the article outlines five cloud-security lessons (enforce MFA, restrict IPs, increase visibility, avoid relying on provider defaults, and vet third parties).