Snowflake Hacker Pleads Guilty to Role in Campaign Targeting 165 Organizations

Summary

Connor Riley Moucka pleaded guilty to charges tied to a campaign that accessed 165 organizations’ Snowflake accounts using stolen credentials. Authorities say the group stole billions of records, extorted victims and received $2.5 million.

Key points

Moucka pleaded guilty to computer fraud, wire fraud, aggravated identity theft and a related conspiracy; sentencing is scheduled for October 27.
Authorities say the group used stolen credentials to access Snowflake accounts at 165 organizations; the campaign was attributed to UNC5537.
The campaign affected organizations including AT&T, Ticketmaster, Santander Bank and Advance Auto Parts.
Authorities say the hackers stole billions of sensitive records, extorted victims and sold stolen data on hacking forums.
The DOJ says the group received $2.5 million in ransom payments and that Moucka obtained $500,000 from data sales.
The DOJ says targeted companies suffered losses exceeding $9.5 million, excluding losses to at least 100 million customers.

Article Details

Event Type: Criminal guilty plea related to a cybercrime campaign targeting Snowflake accounts.
Impact: The campaign accessed data stored in accounts belonging to 165 organizations, stole billions of sensitive records containing personal and financial information, and extorted victims. The DOJ said the cybercriminals received $2.5 million in ransom payments and targeted companies suffered more than $9.5 million in losses, excluding losses to customers—at least 100 million people.