Storm⚡️Watch | Cyber Insights | Snowflake Breach, Replacing NTLM, and Special Guest Patrick Garrity
Summary: Snowflake suffered unauthorized access to customer accounts through stolen credentials, hitting accounts without multi-factor authentication enabled at companies including Ticketmaster, Santander, Advance Auto Parts, and LendingTree subsidiary QuoteWizard. Snowflake says its own systems were not breached and attributes the incident to compromised customer credentials, and it plans to enable MFA by default for all customer accounts without a specific timeline.
Key Takeaway: The accounts that fell were the ones without MFA, and Snowflake's default MFA rollout has no date attached - so every customer still relying on the old default remains exposed to the same stolen-credential playbook.
Read the original at GreyNoise Blog ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026