Operating under the online aliases Waifu and Judische, Moucka systematically targeted Snowflake’s client base, including major corporations like AT&T, Ticketmaster, and LendingTree. The breach involving AT&T alone compromised the call and text records of over 100 million individuals. Beyond large-scale data theft, the operation extracted banking details, driver’s license numbers, and Social Security information, which were either held for ransom or peddled on illicit forums such as BreachForums.
Canadian Hacker Pleads Guilty to Massive Snowflake Data Breach
More than 165 companies fell victim to a sprawling extortion scheme orchestrated by 26-year-old Canadian national Connor Moucka. By infiltrating the cloud provider Snowflake, the hacker gained unauthorized access to billions of records, resulting in millions of dollars in ransom payments and widespread exposure of sensitive personal customer data.
Federal investigators estimate the total financial damage to victims at $9.5 million, while Moucka personally accrued roughly $3 million through extortion and the sale of stolen datasets. FBI special agent W. Mike Herrington characterized the defendant's behavior as calculated and predatory, noting the profound impact on both corporate entities and everyday users. Following his arrest in Canada in late 2024, Moucka was identified by cybersecurity researchers as one of the most consequential threat actors of the year. He remains in custody and is scheduled for sentencing on October 27, where he faces a potential multi-decade prison term.
Comments (0)
No comments yet. Be the first!