Hacker Pleads Guilty in Massive Snowflake Data Breach Affecting Over 165 Companies

A 26-year-old Canadian citizen has pleaded guilty to participating in major cyberattacks that compromised more than 165 organisations relying on cloud storage provider Snowflake, leading to the theft of billions of sensitive records and extensive extortion schemes.

What Happened

According to an announcement from the U.S. Department of Justice (DOJ), Connor Moucka, known online under aliases including ‘Waifu’ and ‘Judische’, entered a guilty plea for his central role in breaches affecting cloud provider Snowflake and its clients. By infiltrating the platform, Moucka and his co-conspirators managed to breach dozens of companies, including high-profile targets such as AT&T, LendingTree, and Ticketmaster.

During the breaches, the perpetrators compromised vast troves of personal information. This included call and text records belonging to more than 100 million AT&T customers, alongside banking details, driver’s licence numbers, and Social Security numbers belonging to individuals across various affected services.

Following his arrest in Canada at the end of 2024, Moucka faced prosecution in the United States. Austin Larsen, a senior researcher at Mandiant (Google’s cybersecurity firm), previously described Moucka as ‘one of the most consequential’ hackers of 2024 during investigations into the incident.

Key Highlights

• Massive Victim Scale: More than 165 companies were compromised, exposing billions of customer and organizational records.
• High-Profile Targets: Victims included major telecommunications and service firms such as AT&T, Ticketmaster, and LendingTree.
• Financial Extortion: Moucka and his accomplices secured over $2.5 million in extortion payments and approximately $500,000 from selling stolen data on illicit platforms such as BreachForums.
• Substantial Losses: The Department of Justice revealed that victims incurred total financial losses amounting to $9.5 million.
• Critical Data Compromised: Stolen records ranged from call and messaging logs to sensitive identification data, including Social Security and driver’s licence numbers.

Why This Matters

The scope of the breach underscores severe financial and privacy impacts on both enterprise organizations and millions of consumers. As noted by FBI Special Agent W. Mike Herrington, Moucka deployed calculated and predatory threats and re-extortion tactics that caused tangible harm to targeted businesses and the everyday individuals whose personal details were exposed.

What to Watch Next

Connor Moucka is currently scheduled to receive his formal sentence on October 27. Legal authorities have indicated that he faces up to decades of imprisonment for his actions.

Frequently Asked Questions

Who is Connor Moucka?

Connor Moucka is a 26-year-old Canadian citizen, operating online under names such as Waifu and Judische, who orchestrated widespread cyber intrusions against Snowflake clients.

How much money was generated through these hacks?

The hacker and his accomplices collected more than $2.5 million via ransom and extortion payments, alongside roughly $500,000 from distributing stolen data on cybercrime forums.

When will sentencing occur?

Moucka is set to be sentenced in court on October 27, where he faces the possibility of decades in prison.

Source: U.S. Department of Justice press release, reported via TechCrunch.