4 ms·

That upstream provider being Snowflake, according to this article: https://www.hudsonrock.com/blog/snowflake-massive-breach-access-through-infostealer-infection

That upstream provider being Snowflake, according to this article: https://www.hudsonrock.com/blog/snowflake-massive-breach-access-through-infostealer-infection https://www.hudsonrock.com/blog/snowflake-massive-breach-acc... (posted on HN here: https://news.ycombinator.com/item?id=40534868 https://news.ycombinator.com/item?id=40534868)

skilled 2y ago
Thanks, upvoted!
Bluestein 2y ago
Makes you wonder what other big outfits that are also Snowflake customers are affected.-
- KoftaBob 2y ago
  Here's a list of their customers that they provide: https://www.snowflake.com/en/customers/all-customers/ https://www.snowflake.com/en/customers/all-customers/
  - araes 2y ago
    A few that might be dangerous. Pfizer, CMS Healthcare, Playstation (Sony), the LA school district, KFC, Freddie Mac (sideshow bob sound...), Capital One, AT&T, Yamaha, Vanderbilt, the Superior Court of California, Square, Siemens Health, Pacific Life Insurance, Ohio Worker's Compensation, Netgear, Micron, HP, Western Union, Warner Music Group, Siemens, Juniper Networks, Forbes, Comcast, City of Tacoma (very financially transparent, cloudy even), Autodesk, and Auburn University. Also, general informational map of those likely affected based on the Ticketmaster breach at least. https://developer.ticketmaster.com/assets/img/products-and-docs/map.jpg https://developer.ticketmaster.com/assets/img/products-and-d... Also: Okta also just got hit, and had 99% of user data stolen. Might be related. https://www.govexec.com/technology/2023/11/okta-breach-includes-theft-data-nearly-all-help-desk-users-including-some-feds/392352/ https://www.govexec.com/technology/2023/11/okta-breach-inclu... The Snowflake breach supposed affects up to 400 companies with a single credential exfiltration. The world wide web's starting to seem like more work than its worth... Also, lots of coverage. Just not front and center. (Reuters) https://www.reuters.com/technology/cybersecurity/live-nation-probing-ticketmaster-hack-amid-user-data-leak-concerns-2024-06-01/ https://www.reuters.com/technology/cybersecurity/live-nation... (Fox Business) https://www.foxbusiness.com/technology/hackers-claim-ticketmaster-data-breach-offer-info-560-million-customers-sale https://www.foxbusiness.com/technology/hackers-claim-ticketm... (Bloomberg) https://www.bloomberg.com/news/articles/2024-05-31/live-nation-says-hacker-is-trying-to-sell-user-data-on-dark-web?srnd=homepage-americas https://www.bloomberg.com/news/articles/2024-05-31/live-nati... (FT, Santander Portion) https://www.ft.com/content/cfeec015-60b2-4106-a279-4c74fbfd4d91 https://www.ft.com/content/cfeec015-60b2-4106-a279-4c74fbfd4... (Associated Press) https://apnews.com/article/ticketmaster-live-nation-data-breach-a756d803c686e07f3b73444b3ca42c74 https://apnews.com/article/ticketmaster-live-nation-data-bre... (BBC, Santander theft, claimed link to Snowflake) https://www.bbc.com/news/articles/c6ppv06e3n8o https://www.bbc.com/news/articles/c6ppv06e3n8o (CNN) https://www.cnn.com/2024/05/31/business/live-nation-ticketmaster-hack/index.html https://www.cnn.com/2024/05/31/business/live-nation-ticketma... (NBC) https://www.nbcnews.com/business/live-nation-probing-ticketmaster-hack-user-data-leak-concerns-rcna155017 https://www.nbcnews.com/business/live-nation-probing-ticketm... (CBS) https://www.cbsnews.com/video/what-to-know-about-alleged-ticketmaster-hack/ https://www.cbsnews.com/video/what-to-know-about-alleged-tic... (Bleeping Computer) https://www.bleepingcomputer.com/news/security/snowflake-account-hacks-linked-to-santander-ticketmaster-breaches/ https://www.bleepingcomputer.com/news/security/snowflake-acc... (Law360) https://www.law360.com/articles/1842317/live-nation-confirms-data-breach-days-after-consumer-suit https://www.law360.com/articles/1842317/live-nation-confirms... (Techcrunch, apparently did a secondary verification) https://techcrunch.com/2024/05/31/live-nation-confirms-ticketmaster-was-hacked-says-personal-information-stolen-in-data-breach/ https://techcrunch.com/2024/05/31/live-nation-confirms-ticke... (Security Week, note that new BreachForums and post may be honeypot) https://www.securityweek.com/hackers-boast-ticketmaster-breach-on-relaunched-breachforums/ https://www.securityweek.com/hackers-boast-ticketmaster-brea... (Spiceworks, BreachForums may have ShinyHunters as admins, and ShinyHunters are suspected of being middlemen or proxies) https://www.spiceworks.com/it-security/data-security/news/ticketmaster-breach-data-leaked/ https://www.spiceworks.com/it-security/data-security/news/ti... (Malware Bytes, screen cap of the post from BreachForums) https://www.malwarebytes.com/blog/news/2024/05/the-ticketmaster-breach-what-you-need-to-know https://www.malwarebytes.com/blog/news/2024/05/the-ticketmas...
    - Bluestein 2y ago
      The amount and importance of the information in this reply merits it - somehow - being a post of its own. Bravo.-
      - araes 2y ago
        Thanks. Mostly just got curious about how extensive the issues might be. Once I realized TechCrunch had actually tried the accounts and Ticketmaster said they were all real accounts, then it got a bit more serious. (italic emphasis mine below) > TechCrunch on Friday obtained a portion of the allegedly stolen data containing thousands of records, including email addresses. This included several internal Ticketmaster email addresses used for testing, which are not public but appear as real Ticketmaster accounts. TechCrunch verified on Friday that the records we checked belong to Ticketmaster customers. > TechCrunch checked the validity of these accounts by running the internal email addresses through Ticketmaster’s sign-up form. All of the accounts came back as real. (Ticketmaster displays an error if someone enters an email address that is already a real Ticketmaster account.) In addition to the accounts working, which in itself is pretty bad. There's also the internal test accounts.
  - chrisBob 2y ago
    Showing 0 items for me!
willsmith72 2y ago
Holy care that's huge if true. What's the biggest data hack ever?
0x1ch 2y ago
There's not much press going on for this breach yet. I've never heard of Hudson Rock until I read their report about Snowflake today. Only reputable outlet I've seen make an article yet is BleepingComputer.

skilled 2y ago

Thanks, upvoted!

Bluestein 2y ago

Makes you wonder what other big outfits that are also Snowflake customers are affected.-

KoftaBob 2y ago
Here's a list of their customers that they provide: https://www.snowflake.com/en/customers/all-customers/ https://www.snowflake.com/en/customers/all-customers/
- araes 2y ago
  A few that might be dangerous. Pfizer, CMS Healthcare, Playstation (Sony), the LA school district, KFC, Freddie Mac (sideshow bob sound...), Capital One, AT&T, Yamaha, Vanderbilt, the Superior Court of California, Square, Siemens Health, Pacific Life Insurance, Ohio Worker's Compensation, Netgear, Micron, HP, Western Union, Warner Music Group, Siemens, Juniper Networks, Forbes, Comcast, City of Tacoma (very financially transparent, cloudy even), Autodesk, and Auburn University. Also, general informational map of those likely affected based on the Ticketmaster breach at least. https://developer.ticketmaster.com/assets/img/products-and-docs/map.jpg https://developer.ticketmaster.com/assets/img/products-and-d... Also: Okta also just got hit, and had 99% of user data stolen. Might be related. https://www.govexec.com/technology/2023/11/okta-breach-includes-theft-data-nearly-all-help-desk-users-including-some-feds/392352/ https://www.govexec.com/technology/2023/11/okta-breach-inclu... The Snowflake breach supposed affects up to 400 companies with a single credential exfiltration. The world wide web's starting to seem like more work than its worth... Also, lots of coverage. Just not front and center. (Reuters) https://www.reuters.com/technology/cybersecurity/live-nation-probing-ticketmaster-hack-amid-user-data-leak-concerns-2024-06-01/ https://www.reuters.com/technology/cybersecurity/live-nation... (Fox Business) https://www.foxbusiness.com/technology/hackers-claim-ticketmaster-data-breach-offer-info-560-million-customers-sale https://www.foxbusiness.com/technology/hackers-claim-ticketm... (Bloomberg) https://www.bloomberg.com/news/articles/2024-05-31/live-nation-says-hacker-is-trying-to-sell-user-data-on-dark-web?srnd=homepage-americas https://www.bloomberg.com/news/articles/2024-05-31/live-nati... (FT, Santander Portion) https://www.ft.com/content/cfeec015-60b2-4106-a279-4c74fbfd4d91 https://www.ft.com/content/cfeec015-60b2-4106-a279-4c74fbfd4... (Associated Press) https://apnews.com/article/ticketmaster-live-nation-data-breach-a756d803c686e07f3b73444b3ca42c74 https://apnews.com/article/ticketmaster-live-nation-data-bre... (BBC, Santander theft, claimed link to Snowflake) https://www.bbc.com/news/articles/c6ppv06e3n8o https://www.bbc.com/news/articles/c6ppv06e3n8o (CNN) https://www.cnn.com/2024/05/31/business/live-nation-ticketmaster-hack/index.html https://www.cnn.com/2024/05/31/business/live-nation-ticketma... (NBC) https://www.nbcnews.com/business/live-nation-probing-ticketmaster-hack-user-data-leak-concerns-rcna155017 https://www.nbcnews.com/business/live-nation-probing-ticketm... (CBS) https://www.cbsnews.com/video/what-to-know-about-alleged-ticketmaster-hack/ https://www.cbsnews.com/video/what-to-know-about-alleged-tic... (Bleeping Computer) https://www.bleepingcomputer.com/news/security/snowflake-account-hacks-linked-to-santander-ticketmaster-breaches/ https://www.bleepingcomputer.com/news/security/snowflake-acc... (Law360) https://www.law360.com/articles/1842317/live-nation-confirms-data-breach-days-after-consumer-suit https://www.law360.com/articles/1842317/live-nation-confirms... (Techcrunch, apparently did a secondary verification) https://techcrunch.com/2024/05/31/live-nation-confirms-ticketmaster-was-hacked-says-personal-information-stolen-in-data-breach/ https://techcrunch.com/2024/05/31/live-nation-confirms-ticke... (Security Week, note that new BreachForums and post may be honeypot) https://www.securityweek.com/hackers-boast-ticketmaster-breach-on-relaunched-breachforums/ https://www.securityweek.com/hackers-boast-ticketmaster-brea... (Spiceworks, BreachForums may have ShinyHunters as admins, and ShinyHunters are suspected of being middlemen or proxies) https://www.spiceworks.com/it-security/data-security/news/ticketmaster-breach-data-leaked/ https://www.spiceworks.com/it-security/data-security/news/ti... (Malware Bytes, screen cap of the post from BreachForums) https://www.malwarebytes.com/blog/news/2024/05/the-ticketmaster-breach-what-you-need-to-know https://www.malwarebytes.com/blog/news/2024/05/the-ticketmas...
  - Bluestein 2y ago
    The amount and importance of the information in this reply merits it - somehow - being a post of its own. Bravo.-
    - araes 2y ago
      Thanks. Mostly just got curious about how extensive the issues might be. Once I realized TechCrunch had actually tried the accounts and Ticketmaster said they were all real accounts, then it got a bit more serious. (italic emphasis mine below) > TechCrunch on Friday obtained a portion of the allegedly stolen data containing thousands of records, including email addresses. This included several internal Ticketmaster email addresses used for testing, which are not public but appear as real Ticketmaster accounts. TechCrunch verified on Friday that the records we checked belong to Ticketmaster customers. > TechCrunch checked the validity of these accounts by running the internal email addresses through Ticketmaster’s sign-up form. All of the accounts came back as real. (Ticketmaster displays an error if someone enters an email address that is already a real Ticketmaster account.) In addition to the accounts working, which in itself is pretty bad. There's also the internal test accounts.
- chrisBob 2y ago
  Showing 0 items for me!

willsmith72 2y ago

Holy care that's huge if true. What's the biggest data hack ever?

0x1ch 2y ago

There's not much press going on for this breach yet. I've never heard of Hudson Rock until I read their report about Snowflake today. Only reputable outlet I've seen make an article yet is BleepingComputer.