What Happened
In 2024, attackers used stolen login credentials to break into the Snowflake cloud-data accounts of numerous companies that lacked multi-factor authentication, then extracted huge volumes of customer data. Ticketmaster/Live Nation disclosed a breach affecting the personal information of well over 500 million customers, and AT&T disclosed the theft of call and text records for roughly 110 million customers. Advance Auto Parts and others were also hit.
The common thread was not a flaw in Snowflake’s core platform so much as customer accounts without MFA — which is central to the dispute over who is responsible.
The Consolidated Litigation
Federal judges consolidated the many resulting class actions — against Snowflake and its affected customers like Ticketmaster and AT&T — into a single multidistrict litigation to coordinate the overlapping questions. Plaintiffs allege the companies failed to secure the accounts (for example, by not requiring MFA) and to protect the data.
Consolidation is efficient here because the same intrusion method and cloud platform run through cases involving very different companies and hundreds of millions of people.
What Affected People Should Know
If you use Ticketmaster or AT&T, assume some data may be involved. AT&T’s exposure of call and text metadata is unusual — it does not include message content, but patterns of who contacted whom can be sensitive. Freeze credit if identifiers were exposed, watch for phishing, and keep records of any resulting fraud.
Before You Act
Thinking About Filing a Claim?
Most plaintiff lawyers offer a free initial consultation and work on contingency, meaning no fee unless there is a recovery. LawsuitWatch is not a law firm: we publish explainers, and we do not provide legal advice, representation or referrals. Your state bar directory is the reliable place to find and verify a lawyer.
Snowflake Data Breach Lawsuit: Ticketmaster, AT&T and More: Frequently Asked Questions
Answers to the most common questions about this case and your legal options.
What was the Snowflake data breach?
A 2024 series of intrusions into companies' Snowflake cloud accounts using stolen credentials, hitting Ticketmaster (500M+), AT&T (~110M call records) and others.
Who is being sued?
Snowflake and affected customers such as Ticketmaster/Live Nation and AT&T, in class actions consolidated into a single multidistrict litigation.
Was AT&T message content stolen?
The AT&T exposure involved call and text metadata (records of contacts), not the content of messages. That metadata can still be sensitive.
Legal Disclaimer
This article is general legal information, not legal advice, and does not create an attorney-client relationship. Case status, eligibility criteria, and any amounts described are as reported at the date shown and may change. Consult a licensed attorney in your jurisdiction about your own situation.