Canadian man pleads guilty in Snowflake customer-account hacking campaign that led to 165 company breaches

A Canadian man has pleaded guilty in the U.S. over the 2024 hacking campaign that broke into Snowflake customer accounts and led to 165 company breaches. Prosecutors said Connor Riley Moucka and others used stolen Snowflake customer login credentials, rather than a flaw in Snowflake itself, between February and October 2024 to steal billions of files and extort victims. Court records say the group took in about $2.5 million in extortion payments, plus nearly $495,000 from selling stolen data, and caused about $9.5 million in victim losses.

Why it matters: This is a major legal milestone in one of the most consequential cloud-account breach waves of the past two years, affecting companies and millions of customers across telecom, finance, retail, and other sectors. Organizations that used Snowflake should review account security, especially credential exposure and multi-factor authentication coverage, while affected users should watch for follow-on fraud and phishing using stolen personal data.

Sources

Canadian Man Pleads Guilty in Snowflake Extortions

BrianKrebs 2026.08.06 99% relevant

This article is a direct update on the same underlying Snowflake customer-account intrusion campaign, adding that Connor Riley Moucka pleaded guilty, admitting to hacking and extorting more than 165 Snowflake customers and to stealing AT&T call and text metadata, along with details on ransom proceeds and co-conspirator Cameron Wagenius.

Snowflake Hacker Pleads Guilty in US Court

Eduard Kovacs 2026.08.06 99% relevant

This is a direct update on the same Snowflake intrusion and extortion campaign, adding that Connor Riley Moucka pleaded guilty in U.S. court to fraud, identity-theft, and conspiracy charges, with DOJ loss figures of more than $9.5 million to companies, at least 100 million affected people, and roughly $2.5 million in ransom payments.

Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People

info@thehackernews.com (The Hacker News) 2026.08.06 97% relevant

This article appears to be a direct update on the same Snowflake-linked breach spree, adding a guilty plea and emphasizing the scale of the victim impact at at least 100 million people.

Canadian pleads guilty to Snowflake cloud data-theft attacks

Ionut Ilascu 2026.08.05 99% relevant

This article is directly about the same Snowflake customer-account intrusion campaign and adds specific plea details: Connor Riley Moucka pleaded guilty, prosecutors say the attackers stole data from at least 165 organizations, extorted at least $2.5 million from three victims, sold stolen data for about $495,000, caused more than $9.5 million in victim losses, and affected more than 100 million individuals.

Canadian man pleads guilty to Snowflake hacks that led to 165 breaches

2026.08.05 100% relevant

This article establishes a trackable story because it is a significant legal development tied to the large multi-victim Snowflake account intrusions, with concrete new facts on the number of breaches, criminal charges, losses, and extortion proceeds.