---
id: 551
title: "Takeaways from the biggest sensitive data exposure breaches"
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/takeaways-from-the-biggest-sensitive-data-exposure-breaches/"
published_at: "2025-10-17 12:00"
tags: ["data-exposure", "mfa", "snowflake", "unc5537", "infostealer", "breach", "extortion"]
phying_url: "https://phying.com/item/551"
lang: en
---

# Takeaways from the biggest sensitive data exposure breaches

## Summary

Sensitive data exposure is a silent killer—attackers can dwell for years. In the 2024 Snowflake breaches, UNC5537 used infostealer-stolen credentials against tenants lacking MFA, then extorted victims.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **Published:** 2025-10-17 12:00
- **Original:** https://www.bugcrowd.com/blog/takeaways-from-the-biggest-sensitive-data-exposure-breaches/
- **Phying News:** https://phying.com/item/551