THREATNOIR
Subscribe
Back to advisories

Army soldier sentenced for spree of attacks on AT&T, Snowflake and other major companies

Former Army soldier sentenced for coordinating attacks on AT&T, Snowflake, and other major enterprises while on active duty. Attacks involved extortion, data theft, and attempted sale of stolen information to foreign intelligence. Snowflake customer environments were compromised as part of this campaign.

HIGHAdvisorySep 26, 2026
Action required
Review Snowflake account access logs for suspicious authentication patterns, query execution anomalies, and data exfiltration between October 2023 and early 2024. Cross-reference with AT&T breach indicators of compromise and check for lateral movement or persistence mechanisms in your Snowflake instances.
Affected products
SnowflakeAT&TSSH Brute
Linked articles
Source links