Security News > 2024 > June > Los Angeles Unified confirms student data stolen in Snowflake account hack

Los Angeles Unified confirms student data stolen in Snowflake account hack
2024-06-21 21:09

The Los Angeles Unified School District has confirmed a data breach after threat actors stole student and employee data by breaching the company's Snowflake account.

On June 18, the threat actor known as 'Sp1d3r, who is selling data from previous SnowFlake attacks, also began selling the data of Los Angeles Unified for $150,000, claiming they stole it from SnowFlake.

After reviewing a sample of the data, LAUSD confirmed to BleepingComputer that the data was stolen from its SnowFlake account.

"As previously stated, on June 6, 2024, Los Angeles Unified became aware of an account from a malicious actor purporting to offer certain student and employee data for sale," a Los Angeles Unified spokesperson told BleepingComputer.

"Through its extensive and ongoing investigation, the District has determined that the data in question was maintained by one or more Los Angeles Unified external vendors on Snowflake, a cloud-based platform used for mass data storage, and appears to have been stolen in a manner consistent with recently publicized thefts involving numerous Snowflake accounts."

Pure Storage confirms data breach after Snowflake account hack.


News URL

https://www.bleepingcomputer.com/news/security/los-angeles-unified-confirms-student-data-stolen-in-snowflake-account-hack/

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
Snowflake 5 0 1 8 0 9