Advance Auto Parts: Data of 2.3 Million People Stolen in Breach

**Executive summary:** A widespread campaign using previously stolen credentials targeted Snowflake customer accounts, allowing threat actors to exfiltrate large volumes of sensitive customer data (including SSNs and government IDs) from companies such as Advance Auto Parts and AT&T; the actor UNC5537 is attributed as a financially motivated group selling/exploiting harvested data and extorting victims.