Bottom line: Snowflake was targeted by a single threat actor in a multi-organization extortion scheme, resulting in significant financial losses.
What's happening: Connor Riley Moucka, of Kitchener, Ontario, Canada, is a 26-year-old cybercrime threat actor who has pleaded guilty to computer fraud and conspiracy to hack and extort 165+ organizations using Snowflake, a cloud data storage provider. Moucka's scheme began in Q2 2024 and spanned several months. The FBI has identified Moucka as one of the most consequential threat actors of 2024.
What to do: Security leaders should monitor Snowflake's security alerts for potential unauthorized access and implement multi-factor authentication to prevent similar extortion schemes.