At least based on the wording of the perpetrator, Snowflake really did have the system designed in a way where a single administrator account gives you carte blanche to everything.
> On may 31st, Snowflake released a statement in which they claim that they are investigating an industry-wide identity-based attacks that have impacted “some” of their customers.
> On may 31st, Snowflake released a statement in which they claim that they are investigating an industry-wide identity-based attacks that have impacted “some” of their customers.
https://community.snowflake.com/s/question/0D5VI00000Emyl00A...
This gives credibility to both Ticketmaster and Santander stories.
Wow! Could be one of the biggest dumps of all time if the threat actors did everything correctly?