4 ms·
Not their fault. Snowflake was breached. And the data was with Snowflake.
by nashashmi 2y ago
Not their fault. Snowflake was breached. And the data was with Snowflake.
- jeff_tyrrill 2y agoYour contractor being breached means you were breached.
- hobs 2y agoSnowflake was "breached" by AT&T users using the same password in Snowflake and another system that was breached. This is just trivial pivoting done with some guesswork done fairly well.
- nijave 2y agoSnowflake wasn't breached. A Snowflake database belonging to AT&T was breached.
- nashashmi 2y agoYou are right apparently. > hundreds of Snowflake customer credentials ... of staffers who have access to their employer’s Snowflake environment ... credentials available online linked to Snowflake environments suggests an ongoing risk to customers who have not yet changed their passwords or enabled MFA.
- jdgoesmarching 2y agoThat’s not how any shared responsibility model works