2024 Snowflake call records breach — 110M
Data compromised
Phone numbers, call and text records, interaction details, cell site identification
Technical writeup
Call and text records of nearly all AT&T cellular and landline customers stolen from Snowflake cloud. Hackers accessed data April 14–25 via credential stuffing. Records from May–Oct 2022; phone numbers, call/text metadata, cell site IDs. AT&T delayed disclosure at DOJ request.
Root cause
Credential stuffing; compromised Snowflake cloud storage.