Hackers who stole data through poorly secured Snowflake accounts are now demanding ransom from at least ten victims.

Hackers are demanding ransom from at least ten companies after the criminals managed to steal the data of these organizations. The gang responsible lives under the name UNC5537.

This group came into the spotlight after data from several Snowflake customers was stolen late last month. Snowflake denied any responsibility, and it now appears that the thieves did indeed gain access through poorly secured customer accounts.

ransom

The saga continues, as the hackers are now demanding ransom from at least ten victims in return for the stolen data. According to Bloomberg, the amounts demanded are between 300,000 and 5 million US dollars. Financial gain seems to have been the main motivation for UNC5537 from the start.

Meanwhile, rumors are circulating about the source of the hack. A criminal claims to have gained initial access by breaking into EPAM systems. As a partner, the company is involved in the management of Snowflake accounts, among other things, and does indeed have several important victims as customers. However, the story has not yet been verified and EPAM itself denies this.