Canadian national Connor Moucka pleads guilty in the US to participating in the 2024 Snowflake hacks involving data theft from 165+ companies, including AT&T
A Canadian national is facing decades in prison for participating in the hacking of data storage platform Snowflake.
Context & Ripple Effects
Moucka’s guilty plea advances a case that began with his arrest by Canadian authorities over the 2024 compromise of Snowflake customers. Later reporting identified Moucka alongside John Binns and Cameron Wagenius in the alleged attacks on AT&T and other customers.
The plea also follows an indictment alleging the group and co-conspirators extorted at least 36 bitcoin from Snowflake clients, moving the episode from an alleged intrusion campaign toward criminal resolution.
First-order effects
- Moucka now faces US sentencing after admitting participation in theft affecting more than 165 companies, including AT&T.
- The US case against a central alleged participant is materially stronger than it was at the arrest and indictment stages.
Second-order effects
- AT&T and the other affected Snowflake customers gain a clearer criminal record tied to the thefts, which can support their own incident-response and legal processes.
- The plea raises pressure on the remaining alleged participants identified in the reporting on the group’s online formation, as prosecutors’ case against Moucka no longer depends on proving his role at trial.
Third-order effects
- Together with prior US sentences for cross-border account-hacking cases, the prosecution points to a durable enforcement pattern: major data-theft investigations increasingly pursue individual operators across national borders.
- For cloud platforms and their customers, the lasting governance burden is not only preventing intrusion but preserving evidence and coordination needed to turn large customer-impacting breaches into prosecutable cases.
The trend: Cross-border cybercrime enforcement is increasingly converting large-scale enterprise data-theft investigations from arrests and indictments into individual criminal accountability.