🔒 Data Privacy & Tech Updated August 2026

Snowflake Data Breach Lawsuit: Ticketmaster, AT&T and More

A 2024 wave of thefts from companies' Snowflake cloud accounts hit Ticketmaster, AT&T and others, exposing data on hundreds of millions of people. The cases are consolidated in a single MDL.

Category

Data Privacy & Tech

Coverage

Active (MDL)

Last Updated

August 2026

Content Type

Legal Analysis

What Happened

In 2024, attackers used stolen login credentials to break into the Snowflake cloud-data accounts of numerous companies that lacked multi-factor authentication, then extracted huge volumes of customer data. Ticketmaster/Live Nation disclosed a breach affecting the personal information of well over 500 million customers, and AT&T disclosed the theft of call and text records for roughly 110 million customers. Advance Auto Parts and others were also hit.

The common thread was not a flaw in Snowflake’s core platform so much as customer accounts without MFA — which is central to the dispute over who is responsible.

The Consolidated Litigation

Federal judges consolidated the many resulting class actions — against Snowflake and its affected customers like Ticketmaster and AT&T — into a single multidistrict litigation to coordinate the overlapping questions. Plaintiffs allege the companies failed to secure the accounts (for example, by not requiring MFA) and to protect the data.

Consolidation is efficient here because the same intrusion method and cloud platform run through cases involving very different companies and hundreds of millions of people.

What Affected People Should Know

If you use Ticketmaster or AT&T, assume some data may be involved. AT&T’s exposure of call and text metadata is unusual — it does not include message content, but patterns of who contacted whom can be sensitive. Freeze credit if identifiers were exposed, watch for phishing, and keep records of any resulting fraud.

Before You Act

Thinking About Filing a Claim?

Most plaintiff lawyers offer a free initial consultation and work on contingency, meaning no fee unless there is a recovery. LawsuitWatch is not a law firm: we publish explainers, and we do not provide legal advice, representation or referrals. Your state bar directory is the reliable place to find and verify a lawyer.

Snowflake Data Breach Privacy

Snowflake Data Breach Lawsuit: Ticketmaster, AT&T and More: Frequently Asked Questions

Answers to the most common questions about this case and your legal options.

What was the Snowflake data breach?

A 2024 series of intrusions into companies' Snowflake cloud accounts using stolen credentials, hitting Ticketmaster (500M+), AT&T (~110M call records) and others.

Who is being sued?

Snowflake and affected customers such as Ticketmaster/Live Nation and AT&T, in class actions consolidated into a single multidistrict litigation.

Was AT&T message content stolen?

The AT&T exposure involved call and text metadata (records of contacts), not the content of messages. That metadata can still be sensitive.

LawsuitWatch Legal Research Team

Data Privacy & Tech Litigation Desk

LawsuitWatch publishes plain-language explainers on active consumer litigation: what a case alleges, who it may affect, and what the process involves. We are not a law firm and do not provide legal advice or representation. Where a figure or filing matters to a decision you are making, verify it against the court record or the official settlement administrator before relying on it. Last updated: August 2026.