Snowflake Will Make MFA Mandatory Next Year

Snowflake is enforcing mandatory multi-factor authentication for all users in a phased rollout from April to November 2025 after a credential-based breach earlier in the year that compromised more than 160 customer accounts and led to data theft and extortion; the report details the rollout stages, planned support for passkeys and TOTP, existing protections like leaked-password detection, and discusses common attacker tactics for bypassing MFA (phishing, consent phishing/OAuth abuse, session hijacking, SIM swapping).