<aside> <img src="/icons/info-alternate_gray.svg" alt="/icons/info-alternate_gray.svg" width="40px" /> From April 14 through May 2024, a threat actor targeted and breached a number of Snowflake accounts. Up to 165 companies may have been impacted.
The threat actor gained access to affected customer accounts and exported a significant volume of customer data. They began to extort many victims and attempted to sell stolen data.
On May 22, 2024 the cybersecurity company Mandiant (subsidary of Google) informed Snowflake of a campaign targeting Snowflake customer accounts. At that time, Snowflake and Mandiant began to notify potential victims. Mandiant has since been working with Snowflake to investigate the issue. Mandiant announced these details on June 10th.
Mandiant and Snowflake's joint investigation found no breach in Snowflake's enterprise environment. Every incident investigated by Mandiant was linked to compromised customer credentials.
Snowflake strongly urges customers to enable multi-factor authentication (MFA) for users in their account.
</aside>
Source: Mandiant
Up to 165 companies were targeted and may have been impacted.