Ticketmaster is Tip of Iceberg: 165+ Snowflake Customers Hacked

Snowflake customers were targeted by UNC5537, a criminal group that accessed hundreds of customer Snowflake instances using stolen credentials (sourced from historical infostealer infections) where MFA was not enforced; Mandiant links the campaign to credential theft from malware such as Vidar, RedLine and others and notes large-scale data exfiltration and extortion with examples including alleged datasets from QuoteWizard (~190M records) and Advance Auto Parts (~380M).