Canadian Man Arrested in Snowflake Data Extortions
Summary: Canadian authorities arrested 25-year-old Alexander Moucka of Kitchener, Ontario on October 30 on a provisional U.S. arrest warrant, alleging he stole data from and extorted more than 160 companies using Snowflake accounts protected by little more than a username and password. Mandiant attributed the compromises to a group it calls UNC5537, and the Justice Department unsealed an indictment charging Moucka and John Erin Binns with conspiracy, 10 counts of wire fraud, four counts of computer fraud and abuse, two counts of extortion, and two counts of aggravated identity theft.
Why it matters: More than 160 Snowflake customers lost data, including AT&T records covering roughly 110 million people, and the hackers reportedly made off with well over 100TB from BPO and MSP datasets alone - all from accounts that lacked multi-factor authentication.
Read the original at Krebs on Security ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026