Hacker pleads guilty to stealing data from more than 165 Snowflake customers
The U.S. Department of Justice said Connor Moucka pleaded guilty to hacking Snowflake and breaking into dozens of its customers, including AT&T, LendingTree, and Ticketmaster. The DOJ said he stole data from more than 100 million AT&T customers and received over $2.5 million in ransom payments. Victims’ losses were cited at $9.5 million. Sentencing is set for Oct. 27.
How this was made
The 30-second read
Why it matters
The update increases legal and reputational pressure on Snowflake and can revive customer concerns about data security and breach exposure, even though the article does not provide new financial metrics.
Market read
A DOJ guilty plea tied to Snowflake-linked breaches is a fresh cyber-enforcement datapoint that can move sentiment and risk perception for the stock.
What to watch
Traders may overreact without knowing whether Snowflake had already remediated, whether customers were compensated, or whether regulators impose new requirements beyond the case outcome.
Background
The DOJ announced a guilty plea by Connor Moucka for hacking cloud provider Snowflake and enabling access to dozens of Snowflake customers.
Ticker impact
DOJ says a hacker pled guilty to hacking Snowflake and breaking into dozens of its customers, including AT&T, LendingTree, and Ticketmaster.
Moderate downside bias for SNOW on risk-off sentiment, with follow-through depending on any additional regulatory or customer-loss disclosures.
The article is a DOJ guilty-plea update linking Snowflake to a large-scale breach via its platform, which can affect perceived platform security and customer risk tolerance even without new financial guidance.
Market effects
Reinforces heightened cyber and regulatory scrutiny for cloud data platforms, potentially increasing security spend and vendor diligence across SaaS/cloud.
Primarily US-focused legal action, but can influence global enterprise procurement and incident-response expectations.
Cross-border cybercrime and enforcement can raise compliance and reputational risk for cloud vendors internationally.
Counterpoint
A guilty plea does not necessarily imply ongoing Snowflake product weakness; it may reflect a specific attacker’s methods and timeline rather than systemic platform failure.
Key entities
- companySnowflake
Cloud provider accused in the DOJ case of being the platform used to breach multiple customers.
- personConnor Moucka
Defendant who pled guilty to hacking more than 165 companies, including via Snowflake, and to extortion and data theft.
- government agencyU.S. Department of Justice
Announced the guilty plea in a press release.
