Army soldier sentenced for spree of attacks on AT&T, Snowflake and other major companies

Cameron Wagenius, while serving as an active-duty Army soldier, exploited privileged access and insider knowledge to steal sensitive data from major companies including AT&T and Snowflake customer environments, then attempted to monetize it through extortion and foreign intelligence sales. This case highlights the devastating impact of insider threats, where trusted individuals abuse their access for personal or financial gain. The Snowflake-related breaches in particular underscore how third-party cloud environments can become attack vectors when customer-side access controls and credential hygiene are insufficient. The willingness to sell stolen data to a foreign intelligence service elevates this beyond financial crime into a national security concern, demonstrating why background monitoring and behavioral analytics for privileged users are critical.