Hacker pleads guilty to stealing data from more than 165 Snowflake customers
Connor Moucka pled guilty to hacking and stealing data from more than 165 Snowflake customers, which net him and his accomplices more than $2.5 million in ransom payments.
The guilty plea from Connor Moucka closes a chapter in one of the more consequential data theft campaigns of recent years. More than 165 Snowflake customers had their data exfiltrated, and the operation yielded over $2.5 million in ransom payments before the authorities caught up with the perpetrators.
What makes this case notable is not the sophistication of the attack. The breach relied on stolen credentials and accounts that lacked multi-factor authentication, a reminder that the most expensive security failures often begin with the most basic omissions. The scale of the damage, however, was anything but basic, touching major enterprises and exposing the fragility of trust in cloud infrastructure.
The plea also signals a shift in how the Department of Justice is treating cybercrime. Moucka's cooperation is part of a broader pattern where prosecutors leverage the first arrest to dismantle the entire network. For the companies affected, the legal closure does little to undo the reputational and operational damage, but it does establish a clear precedent: the financial rewards of large-scale data theft now come with a measurable risk of prosecution.
For the broader market, the case is a quiet but firm reminder that cloud concentration creates a single point of failure. When one provider's customer base becomes a target, the attack surface is not the provider's infrastructure but the collective security hygiene of every tenant on it. The lesson is not that cloud services are unsafe, but that the weakest link in any chain is often the one that was never patched.