News.Bloomberglaw Canadian Hacker Pleads Guilty in Massive Snowflake Data Breach and Extortion Case
Article Content
- •Connor Moucka pleaded guilty to hacking and extortion involving over 165 organizations.
- •The breach exploited accounts lacking multi-factor authentication, leading to massive data theft.
- •Victims suffered over $9.5 million in losses, affecting around 100 million individuals.
Connor Riley Moucka, a 26-year-old from Kitchener, Ontario, pleaded guilty to a hacking conspiracy that compromised over 165 organizations using Snowflake's cloud services. The attacks occurred between February and October 2024, exploiting accounts without multi-factor authentication (MFA) to steal billions of sensitive records. Moucka and his co-conspirators extorted victims for more than $2.5 million, threatening to publish stolen data online. The breach affected major companies, including AT&T and Ticketmaster, impacting an estimated 100 million individuals. Moucka faces a minimum of two years and a maximum of 32 years in prison, with sentencing scheduled for October 27, 2026. Snowflake has since mandated MFA for all customer accounts to enhance security.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (20)
Following this threat?
Track Advance Auto Parts in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Volt Typhoon's Silent Train Network Targets US Critical Infrastructure The Chinese state-sponsored hacking group Volt Typhoon has been linked to a covert network called Silent Train, which has exploited at least four zero-day vulnerabilities over three years. This network utilizes rapidly rotating chains of compromised SOHO routers, IoT devices, and enterprise infrastructure to access… 
GitLab Issues Emergency Patch for Critical RCE Vulnerability GitLab has released emergency patches for a critical remote code execution vulnerability, CVE-2026-97229, affecting its Community and Enterprise Editions. This flaw, stemming from an integer overflow in the CI/CD regular expression compiler, allows unauthenticated attackers to execute arbitrary code via specially…