Snowflake customers hit in data theft attacks after SaaS integrator breach

Over a dozen companies suffered data theft attacks after a SaaS integration provider was breached and authentication tokens were stolen. The majority of attacks targeted Snowflake, a cloud-based data warehouse platform. The threat actor used stolen authentication tokens to steal data from multiple companies and attempted to steal data from Salesforce but was blocked by AI detection. The attacks stem from a security incident at Anodot, an AI-based analytics company that provides real-time anomaly detection. Snowflake confirmed the attacks did not involve any vulnerability or compromise of its own systems, but rather originated from a third-party integration breach.