Snowflake Breach Exposes 165 Customers’ Data in Ongoing Extortion Campaign

June 11, 2024 at 03:21AM As many as 165 Snowflake customers had their data potentially exposed in a campaign targeting data theft and extortion, identified as UNC5537 by Mandiant. The group is believed to operate under various aliases, targeting organizations worldwide and collaborating with a party based in Turkey. Snowflake is taking measures to enhance … Read more

Snowflake Cloud Accounts Felled by Rampant Credential Issues

June 10, 2024 at 05:48PM Mandiant’s investigation confirmed that recent account compromises at Snowflake were due to customers’ failure to implement multifactor authentication (MFA) and access control. Attackers systematically accessed accounts using stolen credentials obtained elsewhere. Compromised accounts’ data was extorted or sold on cybercrime forums. MFA implementation and stronger authentication methods are recommended to … Read more

Advance Auto Parts stolen data for sale after Snowflake attack

June 5, 2024 at 05:57PM Threat actors are claiming to sell 3TB of data stolen from Advance Auto Parts. The stolen data includes 380 million customer profiles, 140 million customer orders, and other sensitive information. The breach is linked to compromised Snowflake accounts, affecting multiple customers. However, Snowflake claims it was not due to any … Read more

Ticketmaster Confirms Cloud Breach, Amid Murky Details

June 3, 2024 at 01:30PM Live Nation confirmed the breach of a third-party cloud database containing customer data, with ShinyHunters claiming to have over half a billion Ticketmaster records for sale. The type of data and its impact remain undisclosed. Snowflake, the affected database, attributes the attack to poor customer configuration, impacting various high-profile clients. … Read more

Ticketmaster confirms massive breach after stolen data for sale online

May 31, 2024 at 09:25PM Live Nation confirms Ticketmaster data breach after it was stolen from a third-party cloud database provider, Snowflake. Criminal threat actor offers user data for sale on the dark web. 560 million users’ data exposed, including personal information and event details. Threat actor claims to have stolen data from several other … Read more

Snowflake denies miscreants melted its security to steal data from top customers

May 31, 2024 at 05:56PM Hudson Rock analysts suspect that Snowflake was breached, leading to the theft of data from Ticketmaster, Santander, and potentially others. Sales of purported stolen data have been reported, including customer records and employee details. Snowflake denies its security was compromised, attributing breaches to customer login credentials being exposed in unrelated … Read more

Live Nation finally confirms massive Ticketmaster data breach

May 31, 2024 at 05:46PM Live Nation has confirmed a data breach at Ticketmaster, with data stolen from a third-party cloud database, likely Snowflake. The breach exposed over 500,000 users’ data. Live Nation is working to mitigate the risk, cooperating with authorities, and notifying regulatory bodies and affected users. They don’t expect a significant impact … Read more