Supply chain ⛓ Supply Chain

Advance Auto Parts Third-Party Breach (May 2024)

📅 2024-05-01 🏢 Snowflake
Primary Source ↗

Incident Details

What Snowflake isn’t saying about its customer data breaches | TechCrunch. As another Snowflake customer confirms a data breach, the cloud data company says its position “remains unchanged.”. Snowflake’s security problems following a recent spate of customer data thefts are, for want of a better word, snowballing. Ticketmaster was the first company to link its recent data breach to the cloud data company Snowflake , and loan comparison site LendingTree has now confirmed its QuoteWizard subsidiary had data stolen from Snowflake. Third-party company: Snowflake.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Snowflake
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2024-05-01 Breach occurred
  2. 2024-06-08 Publicly disclosed