Canadian Man Pleads Guilty in Snowflake Extortions

Connor Moucka exploited a fundamental access control failure: Snowflake customer accounts without multi-factor authentication (MFA) were accessible using only stolen credentials, which are routinely available via infostealer malware and credential marketplaces. The absence of MFA transformed credential theft into a direct path to sensitive data across 165 organizations, including the records of over 100 million AT&T customers. This incident demonstrates that even a reputable cloud platform cannot protect customers who neglect basic authentication hygiene. The $2.5 million extortion outcome underscores that weak configurations in cloud environments carry real financial and reputational consequences, and that organizations remain accountable for their own security posture within shared-responsibility models.