What Snowflake isn’t saying about its customer data breaches

The article describes a wave of customer data exfiltration tied to Snowflake environments: attackers used credentials harvested by info-stealing malware to access customer accounts protected only by single-factor authentication, leading to confirmed impacts at organizations such as Ticketmaster and QuoteWizard; Snowflake attributes the activity to a targeted campaign against accounts without MFA, has notified a limited set of customers, and faces criticism for not enforcing MFA, resetting passwords, or clearly defining what constitutes sensitive data.