← Advance Auto Parts

2024 Snowflake breach — 2.3M

2024 2.3M records affected Share on X

Data compromised

Names, SSNs, driver's licenses, government IDs, employee emails

Technical writeup

Threat actor Sp1d3r accessed Snowflake environment April 14–May 24. Primarily job applicants and current/former employees. Exposed SSNs, driver's licenses, government IDs from applications. Part of broader Snowflake credential-stuffing campaign.

Root cause

Credential stuffing; Snowflake account compromise.

References