Snap-on, a leading automotive tools manufacturer and designer based in the United States, recently suffered a data breach following the publishing of exfiltrated files by the Conti ransomware gang. Snap-on is mainly utilized by the transportation industry, specifically by Mitchelle1, Norbar, Blackhawk, Blue-Point, and Williams brands. In Snap-on’s data breach notification letter, the company revealed that unusual activity was detected in early March and that, after conducting an investigation, “personal data of our Snap-on people was taken by an unauthorized third party between March 1 and March 3, 2022.” Snap-on also explained that the “personal data” involves “associate and franchise data” including names, Social Security numbers (SSNs), dates of birth, and employee identification numbers. While Snap-on did not disclose the unauthorized third-party, the Conti gang itself claimed responsibility for the data breach on March 16th, 2022, via a post on their leak site titled “Snap-on Incorporated.” The group began publishing one (1) gigabyte (GB) of exfiltrated data, but the posting was removed from the leak site before completion. We are unaware of any agreement between Snap-on and Conti, but note that when a post is removed after some data has been leaked, it often means that the victim has paid the demanded ransom for the removal. CTIX analysts will continue to monitor for additional fallout from this data breach.