Snowflake Data Breach Lawsuit Says Cloud Storage Provider Is to Blame for April 2024 Advance Auto Cyberattack

New to ClassAction.org? Read our Newswire Disclaimer

Cloud storage provider Snowflake, Inc. faces a proposed class action lawsuit over its alleged failure to safeguard the sensitive information of its clients’ current and former employees from a reported April 2024 data breach.

Get class action lawsuit news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter here.

The 43-page data breach lawsuit shares that Snowflake is a cloud storage service used by nearly 9,500 customers, a number of whom are global corporations such as Adobe, AT&T, Kraft Heinz, Mastercard, Norvartis, Siemens, Nielsen, PepsiCo and Advance Auto, which itself was hit with a data breach class action this week.

The filing shares that, beginning around mid-April of this year, an unauthorized actor executed “a series of hacks” into Snowflake’s systems, ultimately obtaining the sensitive personal information of roughly 358,000 current and former employees and job applicants of Advance Auto. The data compromised in the breach included, at least, Social Security numbers, driver’s license numbers and certain demographic details, the case relays.

The suit contends that Snowflake wholly failed to prevent the Advance Auto data breach.

“Defendant’s woefully inadequate data security measures made the Data Breach a foreseeable, and even likely, consequence of its negligence,” the proposed class action alleges.

Per the case, Snowflake has exacerbated matters by offering victims “insufficient assurances” that their stolen personal data, or copies of the data, have been recovered or destroyed, or that it has appropriately bolstered its cybersecurity practices.

According to the lawsuit, the information stolen from proposed class members during the Snowflake cloud storage data breach is currently up for sale on the dark web, as reportedly revealed by a cybercriminal who goes by the handle “Sp1d3r.”

The filing accuses Snowflake of failing to implement reasonable cybersecurity practices appropriate for the nature of the sensitive information in its care, including encrypting the data or destroying it when it was no longer needed.

The Snowflake data breach lawsuit looks to cover all United States residents whose personally identifiable information was compromised in the Advance Auto Parts data breach, including anyone who was sent a notice of the incident.

Are you owed unclaimed settlement money? Check out our class action rebates page full of open class action settlements.