Canadian authorities have arrested Alexander “Connor” Moucka, a suspect linked to a series of major data breaches involving the cloud storage company Snowflake. Known by aliases such as “Waifu” and “Judische,” Moucka was apprehended on October 30, 2024, following a request from the United States. The arrest is tied to allegations of Moucka’s involvement in hacking over one hundred sixty-five (165) organizations, including significant corporations like AT&T, Ticketmaster, and Neiman Marcus, by exploiting stolen customer credentials. These breaches, which began in April 2024, have compromised the data of hundreds of millions, including the call logs of over a hundred million AT&T customers and personal information of five hundred sixty million Ticketmaster users. The joint investigation by Snowflake, Mandiant, and CrowdStrike revealed that the breaches were facilitated by the lack of multi-factor authentication (MFA) on affected Snowflake accounts. In response, Snowflake has since mandated MFA for new accounts and required stronger password protocols. The hacker group behind these attacks, identified as UNC5537, is believed to be financially motivated, with members based in North America and an affiliate in Turkey. This group reportedly used infostealer malware to obtain initial access and targeted companies by threatening to sell stolen data unless ransoms were paid. In one instance, AT&T allegedly paid $370,000 to prevent the sale of its compromised data. Moucka’s arrest is part of a broader effort to address cybercrime linked to a network known as the Com, which is involved in both digital and physical crimes. He is also suspected of collaborating with another hacker, John Erin Binns, who was detained in Turkey earlier in 2024 for his involvement in a previous breach of T-Mobile.