Index live· 1,284 files · 148 editions
ForensicPost

Search the index

7 results
Try
Results for “UNC5537”Newest first
24-1030
File

Two Arrests, and No Names Here Yet

An arrest is an allegation. Publication is not reversible, and this corpus cannot correct a wrong identification once it propagates.

UNC5537MultipleEnforcement
Sev 3TargetNot applicableActorUNC5537
24-0716
File

Advance Auto Parts Notified 2,316,591 People After Snowflake Theft

Applied for a job, was not hired, and handed over a social security number to be considered.

UNC5537Third-party cloud platform accessRetailRetail
Sev 4TargetAdvance Auto PartsActorUNC5537USA
24-0712
File

AT&T Says Call and Text Records for Nearly All Mobile Customers Were Taken

A number is not a name until somebody looks it up, and looking it up is trivial. What the set contains is a contact graph.

UNC5537Valid credentials, no MFATelecomConcentration
Sev 5TargetAT&TActorUNC5537USA
24-0625
File

Neiman Marcus Confirmed Breach of a Cloud Database Platform

Customers learned their data had gone, and could not learn from whom.

UNC5537Third-party cloud database accessRetailRetail
Sev 3TargetNeiman MarcusActorUNC5537USA
24-0602
File

Snowflake Campaign Reached 165 Customer Environments Without MFA

165 separate failures with one shape, and a platform that was never itself breached.

UNC5537Stolen credentials, no MFAMultipleIdentity
Sev 5TargetSnowflake customer environmentsActorUNC5537USA
24-0531
File

Five Hundred and Sixty Million, Claimed

A 560 million claim graded low sits below a 110 million disclosure graded high. That ordering is the point of having grades.

UNC5537Valid credentials, no MFAEntertainmentVerification
Sev 4TargetTicketmasterActorUNC5537USA
24-0530
File

Attackers Logged Into Snowflake Customer Environments With Working Credentials

The platform behaved correctly at every step and 165 organisations lost data anyway. There was no CVE to index it under.

UNC5537Valid credentials, no MFAMultipleIdentity
Sev 5TargetSnowflake tenantsActorUNC5537
© 2026 ForensicPost Media · the desk · newsletterGlossaryNo search logging