2024 Snowflake breach — 30M (ShinyHunters)
Data compromised
Customer and employee data, names, SSNs, bank account information
Technical writeup
ShinyHunters accessed third-party database on Snowflake. Breach began April 17, discovered May 10. U.S. employees: 12k+ with SSNs and bank account info. ShinyHunters claimed 30M customer/employee records for sale. Two years identity protection offered.
Root cause
Credential stuffing; Snowflake third-party database compromise.