Overview

• Ticketmaster and Santander data breaches linked to Snowflake accounts, but not to a platform vulnerability.
• Snowflake, CrowdStrike, and Mandiant state the breaches targeted accounts without multifactor authentication.
• Hudson Rock retracted its report implicating Snowflake after legal pressure.
• Snowflake urges customers to enable MFA and monitor for unusual activity.
• Threat actors used credentials obtained through malware or purchase to access accounts.