How a Data-Theft Crew Became a Business

The report outlines the 2024 Snowflake-targeted campaign by the ShinyHunters crew, which did not compromise Snowflake infrastructure but abused weak or leaked customer credentials (often harvested by infostealers) to access accounts, run normal-looking analytics tools, and exfiltrate large datasets from numerous organizations across retail, telecom, finance, healthcare, and education.