Advance Auto Parts stolen data for sale after Snowflake attack

Threat actors using the handle "Sp1d3r" claim to be selling 3TB of data allegedly stolen from Advance Auto Parts' Snowflake environment — reportedly including 380 million customer profiles, 140 million orders, 44 million loyalty/gas card numbers, extensive sales and transaction history, and employee PII (SSNs, driver’s license numbers) — for $1.5M; BleepingComputer has validated portions of the dataset, and the theft is tied to a wider set of Snowflake credential-theft compromises that appear to use credentials stolen by information-stealing malware and target tenants with insufficient MFA protections.