Security News > 2024 > July > Info of 2,3+ million individuals stolen in Advance Auto Parts data breach

Personal information of over 2,3 million individuals has been stolen by attackers as part of the massive data grab via compromised Snowflake accounts without MFA protection, Advance Auto Parts has confirmed by filing notices with the attorney general offices in several US states.

In May, the company has notified the US Securities and Exchange Commission of the compromise, without naming Snowflake - a cloud-based data storage and analytics company base in the US, as the third party hosting the data.

The data breach notices sent out to affected Advance Auto Parts customers say that threat actor exfiltrated their personal information: name, Social Security number, driver's license or other government issued identification number, and date of birth.

"This information was collected as part of the Advance Auto Parts job application process," they explained, and offered affected persons redit monitoring and identity restoration services free of charge.

Approximately 165 Snowflake customers have been affected in this attack, including TicketMaster, Santander Group, LendingTree, and Advance Auto Parts.

"Soon, Snowflake will require MFA for all human users in newly created Snowflake accounts. We recommend that all customers start using MFA authentication policies and Trust Center now to prepare their environments, and watch for additional features in the coming months," they added.

News URL

https://www.helpnetsecurity.com/2024/07/12/breach-snowflake-mfa/