Connor Riley Moucka was extradited from Canada to the US and pleaded guilty to computer fraud, wire fraud, aggravated identity theft, and conspiracy related to a cybercrime campaign targeting Snowflake data storage accounts. The attackers used stolen login credentials to access data from 165 organizations, including major corporations such as AT&T, Santander Bank, and State Farm. The campaign, attributed to UNC5537, resulted in the theft of billions of sensitive personal and financial records, ransom payments of $2.5 million, and additional financial gains from selling stolen data. The DOJ estimates direct losses to victim companies at over $9.5 million, excluding customer losses affecting at least 100 million individuals. A former US soldier is also believed to have participated in the campaign.

The cybercrime campaign caused significant financial losses exceeding $9.5 million to targeted organizations and compromised billions of sensitive personal and financial records. At least 100 million individuals' data was affected. The attackers extorted ransom payments totaling $2.5 million and profited further by selling stolen data on hacking forums. The breach impacted a wide range of major companies across multiple industries, undermining data confidentiality and causing reputational damage.

This is a law enforcement case involving prosecution of the threat actor. No technical patch or remediation applies to the vulnerability itself. Organizations should ensure robust credential security and monitoring to prevent unauthorized access to cloud data storage accounts. Follow vendor and Snowflake security best practices for account protection. No direct remediation or patch is indicated by the advisory.