WorkOS notified customers of a data security incident first detected on October 30, 2026, after anomalous traffic hit an internal business system. The company says an unauthorized actor accessed an internal sales and marketing API, which in turn exposed data from its Salesforce and Snowflake instances, including customer names, emails, phone numbers and business contact details. WorkOS states it found no evidence that application data or production services were affected, and believes the breach was limited to CRM and support data.
news.ycombinator.com
· 2026-11-02
A three-person data platform team at a roughly 500-person company built a side tool in February to host HTML files generated by AI coding assistants like Claude Code. Eight months later, that tool reportedly has as many or more weekly users as the company's Looker business intelligence subscription, while Looker usage has dropped by about a third.
david.lequin.dev
· 2026-10-23
Asos has confirmed that hackers breached a third-party platform hosting customer communication data, stealing names, home addresses, phone numbers, emails, and profile notes such as search queries. The attackers, identifying themselves as the Xuanye Group, used Asos's own app notification system to alert customers directly, demanding the company engage with them or risk having the stolen data leaked online.
techcrunch.com
· 2026-10-08
Asos customers received a push notification claiming hackers had fully compromised the retailer's Snowflake cloud instance and threatening to leak the data unless the company engaged with them. The message, addressed to Asos's data protection and IT teams, linked to a Telegram channel tied to a group calling itself Xuanye Group. Asos confirmed it is investigating unauthorised activity on third-party platforms used to communicate with customers, restricted access to the notification systems, and said names and contact details may have been exposed but payment data and passwords were not believed to be affected.
engadget.com
· 2026-10-06
ASOS confirmed unauthorized access to third-party platforms it uses to communicate with customers, after hackers sent rogue push notifications through the ASOS mobile app claiming to have breached its Snowflake data environment. The company says names and contact details may have been exposed, but has not verified the Snowflake compromise claim or disclosed how many customers are affected. ASOS says payment card data and account passwords do not appear to be impacted.
bleepingcomputer.com
· 2026-10-06
Multiple ASOS customers reported receiving suspicious push notifications on their devices, purportedly from hackers. The messages, directed at ASOS's data protection and IT teams, claim that the hackers have fully compromised Snowflake, a data storage service. The hackers' Telegram channel, created today under the name Xuanye Group, has posted about the breach, suggesting the attackers may have gained access to multiple systems within ASOS.
bbc.co.uk
· 2026-10-06
Dutch police arrested a 24-year-old Amsterdam man on September 15, described by the FBI as an alleged leader of the ShinyHunters extortion group. Police say a laptop seized from him contained details of two planned murders abroad, and a Rotterdam court has ordered him held for at least 90 more days pending trial. The FBI says ShinyHunters and its associates have breached over 140 organizations and collected at least $70 million in extortion payments since last year.
bleepingcomputer.com
· 2026-09-29
Cameron John Wagenius, a 22-year-old Army soldier who used the alias 'Kiberphant0m,' was sentenced to nearly seven years in federal prison and ordered to pay $294,978 in restitution. He had pleaded guilty to hacking into telecom companies via exposed Snowflake cloud credentials, stealing call and text metadata from more than 100 million AT&T customers and Verizon's Push-to-Talk business, then extorting the firms not to leak the data.
krebsonsecurity.com
· 2026-09-25
A conference talk and blog post argue that Pandas pushes users toward costly distributed systems like Spark or Snowflake long before their data actually requires that complexity. The author says most workloads that hit the 'Pandas cliff' around tens of gigabytes can instead be handled efficiently on a single machine using newer tools such as Polars and DuckDB, up to roughly the 100GB mark. Citing an Amazon Redshift fleet study, the piece suggests genuinely 'Big Data' scale is far rarer than commonly assumed.
eddie.codes
· 2026-09-12
Snowflake reported fiscal second-quarter revenue of $1.55 billion, up 35% year over year, and adjusted earnings of 62 cents per share, both beating analyst expectations. The company raised its full-year product revenue forecast to $6.07 billion and pointed to growth in its CoCo AI coding agent, which now serves over 9,100 accounts after adding 2,000 in the quarter.
cnbc.com
· 2026-09-02
Following the guilty plea of hacker Connor Moucka, who used stolen but valid credentials to breach over 165 Snowflake customer accounts and steal billions of records including AT&T call logs, Snowflake is phasing out password authentication for non-human service accounts. By October 2026, all legacy service users will be forced onto the SERVICE account type, which cannot authenticate with a password at all.
bleepingcomputer.com
· 2026-08-26
GoKawiil