Snowflake and Mandiant Disclose Campaign of Unauthorized Customer Account Access and Data Theft

In 2024, Snowflake published guidance on detecting and preventing unauthorized access to customer accounts ^[1]. Google Cloud Mandiant also released a threat analysis describing a data theft and extortion campaign targeting Snowflake customer environments ^[2]. The report noted that compromised accounts largely lacked multi-factor authentication (MFA); enterprises should immediately review Snowflake account protections and access logs ^[2].

Industries mainly affected: Technology, Cross-industry

The report noted that compromised accounts largely lacked multi-factor authentication; enterprises should immediately review Snowflake account protections and logs ^[2].