Snowflake Hacker Pleads Guilty After Password Breach Exposes 100 Million Records

Connor Riley Moucka pleads guilty to the 2024 Snowflake $SNOW data breaches. At least 165 organizations suffered network compromises. And the sheer scale of the data theft exposed the personal records of at least 100 million people—which included cellular customers at AT&T $T. For his role, Moucka walked away with at least $495,000 from ransoms and data sales. But novel exploits weren't what the attackers relied on. No zero-days existed. They simply logged into accounts with old passwords—harvested years earlier by infostealer malware—that lacked multi-factor authentication. Companies spend millions on advanced threat detection, yet they still can't enforce basic MFA on ancient credentials.