Hackers who stole Ticketmaster data from Snowflake account appear to have accessed data through contractor named EPAM Systems. EPAM has workers in Belarus, Ukraine and, before war, Russia. Hacker told me they breached EPAM worker in Ukraine and found plaintext credentials on his machine. My latest:

Hackers Detail How They Allegedly Stole Ticketmaster Data From Snowflake

A ShinyHunters hacker tells WIRED that they gained access to Ticketmaster’s Snowflake cloud account—and others—by first breaching a third-party contractor.

the old credentials-in-the-jira-ticket convenience hack...