GoKawiilSnowflake to block password logins for service accounts after AT&T-linked breach
Following the guilty plea of hacker Connor Moucka, who used stolen but valid credentials to breach over 165 Snowflake customer accounts and steal billions of records including AT&T call logs, Snowflake is phasing out password authentication for non-human service accounts. By October 2026, all legacy service users will be forced onto the SERVICE account type, which cannot authenticate with a password at all.