A Canadian man has pleaded guilty to charges related to a widespread cyberattack campaign that compromised over 165 customer environments of the data storage platform Snowflake in 2024. Connor Moucka, also known by online aliases such as Waifu, Judische, Catist, and Ellyel8, was arrested in Kitchener, Ontario, on October 30, 2024, and extradited to the United States in March 2025. He faces up to 32 years in prison, with sentencing scheduled for October 27.
Moucka pleaded guilty to computer fraud, wire fraud, aggravated identity theft, and a related conspiracy. Prosecutors allege he earned $495,000 through extortion and by selling stolen data online. In one instance, he re-extorted a victim using data belonging to a government official and their immediate family.
The cyberattack campaign, which Moucka allegedly carried out with co-conspirators John Binns and Cameron Wagenius, involved using stolen credentials to access customer accounts on the Snowflake platform. The group is said to have stolen billions of sensitive records and received over $2.5 million in combined extortion payments. Victims included major companies such as AT&T, Ticketmaster, Advance Auto Parts, and Santander.
The stolen data reportedly exposed records of more than 100 million individuals, encompassing call and text history, banking and financial information, payroll records, government identification numbers, and other personally identifiable data. Officials estimate that the victim companies incurred over $9.5 million in losses, excluding those borne by their customers.
Moucka and his alleged co-conspirators are associated with "The Com," a cybercriminal network reportedly composed of minors and young adults involved in various illicit activities, including violence, extortion, and sextortion. The Department of Justice highlighted the significant impact of Moucka's actions, noting the harm inflicted on both targeted companies and the millions of individuals whose data was compromised.
