THREAT ACTOR COMPROMISING SNOWFLAKE DATABASE CUSTOMERS

Summary from the TLDR InfoSec newsletter

A campaign by threat actors to use stolen credentials to breach Snowflake databases that do not have MFA or 2FA enabled has been reported. The threat actor is using custom tooling for the Snowflake environment to carry out theft and extortion operations. It is believed that there hasn't been any compromise of Snowflake's internal systems.