Cylance confirms data breach linked to 'third-party' platform

A threat actor is selling what is claimed to be 34 million Cylance-related emails/PII for $750,000; BlackBerry Cylance says the data appears to be old marketing records from a third-party (2015–2018) and that its systems/customers are not compromised. The report links this sale to wider active Snowflake account compromises attributed to UNC5537, which leveraged stolen credentials from infostealer malware and poor account protections (no MFA, missing network allow lists) to access and extort multiple organizations.