Canadian Man Pleads Guilty in Snowflake Data Breach Case
Summary
Connor Moucka pleaded guilty to four charges tied to the 2024 Snowflake customer-data breach. The plea agreement says the scheme affected 165 organizations and caused more than $9.5 million in losses.
Key points
- Connor Moucka, 26, of Kitchener, Ontario, pleaded guilty in U.S. federal court to computer fraud, wire fraud, aggravated identity theft and conspiracy.
- The U.S. Department of Justice says Moucka and co-conspirators accessed Snowflake customers’ cloud storage between February and October 2024.
- The affected organizations included AT&T, Ticketmaster and Santander Bank; the article reports information was stolen from 165 organizations.
- The plea agreement says the group extorted 36 bitcoin, worth about US$2.5 million at the time, from at least three victims and sought at least US$6 million for stolen data.
- The agreement says the scheme caused victim companies more than US$9.5 million in losses, including ransoms paid and response costs.
- Moucka is scheduled to be sentenced Oct. 27; the aggravated identity theft count carries a mandatory minimum of two years in prison.
Article Details
- Event Type
- Guilty plea in a cybercrime case involving the 2024 Snowflake data breach.
- Impact
- The breach affected 165 organizations. The plea agreement says the co-conspirators caused victim companies more than $9.5 million in losses, including ransom payments and response costs. They extorted 36 bitcoin, valued at about $2.5 million at the time, and sought at least $6 million for stolen data.
People
Threat Actors
catistAlias Moucka used to conceal his identity, according to the article.Connor MouckaPleaded guilty to four charges related to the Snowflake data breach. The U.S. Department of Justice said he obtained sensitive information and extorted victims; the plea agreement says he and his co-conspirators caused victim companies more than $9.5 million in losses.Connor Riley MouckaAlias Moucka used to conceal his identity, according to the article.ellyel8Alias Moucka used to conceal his identity, according to the article.John Erin BinnsCharged in the Snowflake data breach case in April 2025; the article does not provide further details about the charges.JudischeAlias Moucka used to conceal his identity, according to the article.
Vendors
Industries
BankingMoucka also developed a computer program that automated the process of identifying valuable information, including names, roles, IP addresses and banking details.TelecommunicationsIn 2024, Moucka and his co-conspirators accessed the cloud storage of Snowflake Inc. customers — including telecommunications company AT&T, Live Nation's Ticketmaster and Santander Bank.