Give your data warehouse your strongest login
Extortion groups again claim big thefts from cloud data platforms this month, reportedly after phoning staff. Lock those logins down.
This month brought another round of extortion claims against companies’ cloud data platforms such as Snowflake and Databricks. Reports describe the same opening as earlier this year: voice phishing calls to employees, approved logins, then large queries and exports. Some of the numbers come from the attackers and aren’t confirmed. The method is consistent.
A data warehouse is where everything ends up: customers, orders, payments, analytics. It deserves your strongest controls.
- Require SSO with phishing-resistant MFA for every human user. No local passwords.
- Service accounts use key pairs or workload identity, with network policies limiting where they connect from.
- Restrict access by network where the platform supports it.
- Alert on unusual queries: huge result sets, exports to new stages, new users or roles.
- Review who has access to raw personal data. Most analysts can work with masked columns.