Connor Riley Moucka, a Canadian citizen, pleaded guilty to unauthorized access to a protected computer, a federal felony, in a US federal court. Moucka was accused of exploiting a previously unknown vulnerability in Snowflake's software to gain unauthorized access to the platform. The hacking incident took place in 2022 and was detected in July 2023. Moucka was subsequently arrested in Canada and extradited to the US in July 2025.
According to the indictment, Moucka used the vulnerability to breach Snowflake's security controls, allowing him to access sensitive data. The exact nature of the data accessed remains classified. Moucka's admission of guilt underscores the severity of the incident and the need for robust cybersecurity measures.
The incident highlights the ongoing threat of sophisticated cyber attacks, particularly those targeting cloud-based infrastructure. Snowflake's security team discovered the vulnerability in 2023, and the company has since taken steps to patch the issue and enhance its security protocols. The incident serves as a reminder of the importance of staying vigilant and proactive in the face of emerging threats.