Quick Takeaways
- A hacker pleaded guilty for breaching Snowflake, exposing data from over 165 organizations and 100 million individuals, mainly through stolen old passwords with MFA turned off.
- The attack was caused by unrotated credentials harvested years earlier via infostealers, not platform vulnerabilities, highlighting risks of outdated security practices.
- Over 79.7% of breached accounts had prior credential exposure, emphasizing the importance of frequent password updates and credential hygiene.
- Snowflake has begun enforcing multi-factor authentication by default, with a phased rollout planned by October 2026 to prevent password-only sign-ins.
Snowflake Breach Leads to Guilty Plea by Hacker
A hacker has admitted guilt in connection with major cyberattacks on Snowflake, a cloud data platform. The individual, 26 years old, pleaded guilty to charges including computer fraud and identity theft. These breaches took place in 2024 and compromised the data of over 100 million people. The hacker gained access to at least 165 organizations. Furthermore, he stole and sold data, earning nearly $495,000. These events reveal how vulnerabilities can lead to widespread damage, especially when security measures are neglected.
Understanding How the Breach Occurred and Its Impact
The hacker accessed sensitive accounts primarily because of old passwords. Many of these passwords had been collected by malware years earlier and were never changed. Additionally, the accounts lacked multi-factor authentication, which could have prevented unauthorized access. Importantly, experts say the attack didn’t exploit any platform flaws but relied on weak security habits. Victims lost valuable information, including payroll records, social security numbers, and even government-related data. This incident highlights the importance of regularly updating passwords and enabling stronger security features to protect personal and organizational information.
Discover More Technology Insights
Dive deeper into the world of Cryptocurrency and its impact on global finance.
Explore past and present digital transformations on the Internet Archive.
DataProtection-V1
