Snowflake Attacker Connor Moucka Pleads Guilty, Faces Up to 32 Years
Summary
Connor Moucka pleaded guilty to fraud, identity theft and conspiracy charges tied to a campaign that used stolen credentials to access more than 165 Snowflake customer environments and expose records of over 100 million people.
Key points
- Moucka pleaded guilty to computer fraud, wire fraud, aggravated identity theft and conspiracy.
- Prosecutors linked Moucka and alleged co-conspirators to compromises of more than 165 Snowflake customer environments using stolen credentials.
- The campaign exposed sensitive records belonging to more than 100 million people, including call and text histories, financial information and government ID numbers.
- Victims included AT&T, Ticketmaster, Advance Auto Parts and Santander.
- Authorities said Moucka earned $495,000 from extortion and data sales; prosecutors said he and co-conspirators received more than $2.5 million in extortion payments combined.
- Officials said victim companies suffered more than $9.5 million in combined losses, excluding customer losses.
- Moucka is scheduled for sentencing Oct. 27 and faces up to 32 years in prison.
Article Details
- Event Type
- Guilty plea by a cybercriminal for his role in a large-scale data theft and extortion campaign targeting Snowflake customer environments.
- Impact
- The campaign compromised more than 165 customer environments and exposed records of more than 100 million people. Prosecutors said Connor Moucka and alleged co-conspirators stole billions of records and received more than $2.5 million in extortion payments combined. Victim companies reported more than $9.5 million in combined losses, excluding losses to their customers.
MITRE ATT&CK
People
Threat Actors
Cameron WageniusProsecutors identified him as an alleged co-conspirator with Moucka and said they stole records and received extortion payments.catistAn online alias the article says Connor Moucka used.Connor MouckaPlead guilty to computer fraud, wire fraud, aggravated identity theft, and conspiracy; the article links him to the Snowflake customer data theft and extortion campaign.Connor Riley MouckaAn online alias the article says Connor Moucka used.ellyel8An online alias the article says Connor Moucka used.John Erin BinnsProsecutors identified him as an alleged co-conspirator with Moucka and said they stole records and received extortion payments.JudischeAn online alias the article says Connor Moucka used.The ComResearchers described Moucka and his co-conspirators as associated with this cybercriminal network, whose members engage in extortion and other forms of cybercrime.