Get the latest tech news
Hackers steal “significant volume” of data from hundreds of Snowflake customers. Given shortcomings of Snowflake and its customers, there's plenty of blame to go around.
Given shortcomings of Snowflake and its customers, there's plenty of blame to go around.
Researchers from Mandiant, a Google-owned security firm Snowflake retained to investigate the mass compromise, said Monday that the companies have so far identified 165 customers whose data may have been stolen in the spree. Mandiant’s Monday post said that all the compromises it has tracked so far were the result of login credentials for Snowflake accounts being stolen by infostealer malware and stored in vast logs, sometimes for years at a time. The threat actor has subsequently begun to extort many of the victims directly and is actively attempting to sell the stolen customer data on recognized cybercriminal forums.
Or read this on r/technology