Snowflake customers suffer data theft attacks after third-party issue,
company confirms 'unusual activity'

Date:
Wed, 08 Apr 2026 13:45:00 +0000

Description:
A supply chain attack has, once again, affected at least a dozen Snowflake customers.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Tech Radar Pro Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Become a Member in Seconds Unlock instant access to exclusive member features. Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over. You are
now subscribed Your newsletter sign-up was successful Join the club Get full access to premium articles, exclusive features and a growing list of member rewards. Explore An account already exists for this email address, please log in. Subscribe to our newsletter ShinyHunters breached Anodot, stealing Snowflake tokens Attack hit more than a dozen Snowflake customers Group
claims data theft and extortion, echoing 2024 campaign A supply chain attack at an analytics company has resulted in more than a dozen Snowflake customers losing their sensitive information.

The ShinyHunters extortion group recently broke into Anodot, an AI-powered, cloud-based analytics platform that hunts for business incidents and
anomalies in real-time, helping businesses identify sudden drops in sales, cost spikes, or technical glitches, before they can significantly impact the organization and its customers. The hackers managed to find Anodots authentication tokens, which allowed them to access customer Snowflake accounts. They even tried to access Salesforce accounts but were apparently detected and blocked before being able to infiltrate. Article continues below You may like ShinyHunters claims it's behind ongoing Salesforce Aura data theft assault, warns more attacks to come Top ad tech firm Optimizely hit by data breach - around 10,000 companies possibly affected 'The breadth of targeted cloud platforms continues to expand': Google's security team takes a look at how ShinyHunters have rolled out so many SSO scams recently ShinyHunters lay claim Snowflake told BleepingComputer it detected unusual activity that impacted a small number of its customers:

"We recently detected unusual activity within a small number of Snowflake customer accounts linked to a specific third-party integration," Snowflake told BleepingComputer .

"We immediately launched an investigation and, out of an abundance of
caution, locked down potentially impacted customer accounts. We also notified potentially impacted customers and provided precautionary guidance to help them further protect their accounts."

Snowflake stressed that its systems were not compromised, and no bugs were leveraged. Are you a pro? Subscribe to our newsletter Sign up to the
TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners
or sponsors By submitting your information you agree to the Terms &
Conditions and Privacy Policy and are aged 16 or over.

Soon after the news broke, ShinyHunters reached out to the publication, claimed the attack, and said they stole data from dozens of companies. They also confirmed having tried to breach Salesforce, and failing, and said the attack originated from Anodot. They stated that theyve had access to that companys infrastructure for some time.

ShinyHunters love targeting Snowflake customers. In 2024, there was a major customer data theft and extortion campaign, in which hackers used stolen usernames and passwords to log into Snowflake customer environments that did not use multifactor authentication ( MFA ). Once inside, they downloaded sensitive data from dozens of companies Snowflake instances, including huge datasets from big names like AT&T, Ticketmaster/Live Nation, Santander,
Neiman Marcus and others.

They later tried to extort the victims in exchange for deleting the stolen files and apparently, the same is happening now, as well. The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds. Make sure to click the Follow button!

And of course you can also follow TechRadar on TikTok for news, reviews, unboxings in video form, and get regular updates from us on WhatsApp too.



======================================================================
Link to news story: https://www.techradar.com/pro/security/snowflake-customers-suffer-data-theft-a ttacks-after-third-party-issue-company-confirms-unusual-activity


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)