The AT&T Snowflake Data Breach: Cloud Account Lessons for SMBs

Last updated: October 19, 2026

In 2024 AT&T disclosed that attackers had accessed a cloud data platform holding call and text records from roughly six months in 2022. The platform was provided by Snowflake, and similar incidents were reported at other companies using the same service. Reports said the data included phone numbers and call durations. The details are for AT&T to explain, but the pattern is a useful reminder for any business that keeps data in cloud services.

The lesson: your data is only as safe as the accounts that reach it

Cloud platforms are secure in many ways, yet attacks on customer accounts, such as stolen credentials without multi-factor authentication, can expose data without breaking the platform itself. The responsibility is shared between the provider and the customer.

What small businesses should do

• Turn on MFA for every cloud service, especially administrator and service accounts.
• List your cloud services and who has access to each. Remove old accounts.
• Limit data in the cloud to what you need and set retention rules.
• Watch sign-in activity and alerts for unusual logins.
• Review vendor risk: ask key providers how they secure customer data and how they will notify you.

Layered security

No single control is enough. Patching, endpoint protection, email security, backups and training work together, and a managed provider keeps them all current.

Related reading

• managed cybersecurity for Portland businesses
• Cloud services in Portland: the 2026 business guide
• Your cybersecurity is only as strong as your weakest vendor

Talk to a local team

PDX Information Technology Services provides managed IT, cybersecurity and compliance support for small businesses in Portland, Lake Oswego, Beaverton, Hillsboro and Vancouver, WA. Plans start at $100 per user per month (Gold) and $180 per user per month (Platinum). Call 971-331-4871 or book a free assessment.