Elevated · Legal
Securities Class Action Lawsuit
OpenObserved
A class action lawsuit was filed alleging misleading statements about revenue headwinds and the CEO transition.
Vendor dossier // snowflake.com
Snowflake Inc.
Also known as Snowflake Computing Inc.
Menlo Park, California, U.S. · Est. 2012 · 9,000-10,000 employees
Key people
- Sridhar Ramaswamy serves as Chief Executive Officer, succeeding Frank Slootman in February 2024 [11].
- Frank Slootman serves as Chairman of the Board [12].
- Benoit Dageville and Thierry Cruanes are Co-Founders [9].
- Jonathan Beaulier was appointed Chief Revenue Officer [8].
Last updated: Aug 19, 2026, 11:51 PM
Elevated risk
Conditional
Snowflake is a critical data infrastructure provider with a robust public security posture, including SOC 2 and CISA pledges. However, the vendor is currently…
Higher score = greater risk. How we score
74/100
Elevated RiskResearch Coverage
Complete
Evidence Quality
High
Material incidents
3
Last assessed
Aug 19, 2026, 11:51 PM
Material findings
01. Findings
Snowflake maintains a public Trust Center and Compliance Center, offering SOC 2 Type 2 reports and adherence to NIST 800-53 and HIPAA standards The company has signed the CISA Secure by Design pledge and partners with HackerOne for vulnerability disclosure In 2024, a major security incident occurred where attackers used stolen credentials to access customer environments that lacked Multi-Factor Authentication (MFA). Snowflake confirmed its own infrastructure was not compromised, attributing the breaches to customer-side misconfigurations. The company provides a Trust Center tool to help customers monitor MFA violations and security risks
Elevated · Legal
Multidistrict Litigation for Data Breach
OpenObserved
Federal cases involving the 2024 breach were consolidated in the U.S. District Court for the District of Montana. Settlements and dismissals are ongoing.
High · Security
Snowflake Customer Credential Theft Campaign
OpenObserved
In mid-2024, threat actors used stolen credentials to access over 160 customer environments lacking multi-factor authentication. Snowflake's infrastructure was not compromised, but significant customer data was exfiltrated.
High · Security
2024 Snowflake Customer Data Breach
OpenObserved
Attackers used stolen credentials to access customer Snowflake environments lacking MFA, compromising data for over 160 organizations including AT&T and Ticketmaster. Snowflake confirmed its own platform was not breached.
02. Events
[legal] Securities Class Action Lawsuit
A class action lawsuit was filed alleging misleading statements about revenue headwinds and the CEO transition.
Feb 24, 2026, 12:00 AM · Source
[legal] Data Security Breach Class Action Settlement
A class action lawsuit regarding the 2024 credential theft campaign reached a preliminary settlement approval in May 2025, administered pending final court approval.
May 22, 2025, 12:00 AM · Source
[legal] Multidistrict Litigation for Data Breach
Federal cases involving the 2024 breach were consolidated in the U.S. District Court for the District of Montana. Settlements and dismissals are ongoing.
Oct 4, 2024, 12:00 AM · Source
[breach] Snowflake Customer Credential Theft Campaign
In mid-2024, threat actors used stolen credentials to access over 160 customer environments lacking multi-factor authentication. Snowflake's infrastructure was not compromised, but significant customer data was exfiltrated.
May 30, 2024, 12:00 AM
03. Observed posture
Evidence classObserved
Deterministic outside-in checks run directly against the vendor's domain - not inferred from press or marketing pages.
Last observed: Aug 19, 2026, 11:51 PM
TLS certificate
Certificate expires in 79 days
infoPassSecurity headers
6/6 security headers present
infoPassEmail authentication (SPF / DMARC)
04. AI Risk
How this vendor uses AI/ML with customer data - model providers, training stance, subprocessors, and relevant DPA language when publicly documented.
AI exposure tier: Moderate AI Exposure
Snowflake markets itself as the 'platform for the AI era,' enabling enterprises to build and use AI applications on their data [4]. The company offers features like Snowflake Intelligence and Cortex Agents [6]. While it supports AI workloads, the provided sources do not explicitly state whether customer data is used to train Snowflake's own foundational models. The security breach in 2024 highlighted risks associated with identity management in AI-enabled data environments [35].
- Training on customer data
- Training stance unknown
- DPA / trust-center notes
- Snowflake positions itself as the 'platform for the AI era' and offers AI/ML capabilities within its data cloud. Specific details on whether customer data is used to train foundational models are not explicitly detailed in the provided sources, though the platform supports AI workloads.
Evidence & provenance
38 sources · Generated Aug 19, 2026, 11:51 PM
Expand →Collapse ↑
Evidence & provenance
38 sources · Generated Aug 19, 2026, 11:51 PM
Every verdict stores the public sources retrieved for this run. Read our methodology.
- Verdict generated
- Aug 19, 2026, 11:51 PM
Input sources · retrieved Aug 19, 2026, 11:51 PM
Company(7)
- Open source →
Snowflake Inc.
Company
- Open source →
LEADERS Interview with Frank Slootman, Chairman and Chief Executive Officer, Snowflake, Inc.
Company
05. Company
Snowflake Inc. is a publicly traded cloud data platform company headquartered in Menlo Park, California Founded in 2012, the company went public on the NYSE under the ticker SNOW It serves over 13,900 global customers, including hundreds of Fortune 500 companies, by providing a unified data cloud for analytics, data engineering, and AI workloads The company reported $4.68 billion in revenue for 2026 and employs approximately 9,000 people Snowflake operates on a consumption-based revenue model and has expanded its footprint with new offices in Toronto and Bellevue
06. Product
Snowflake offers the 'AI Data Cloud,' a fully managed SaaS platform that unifies data warehousing, data lakes, and data sharing. The platform runs on major cloud infrastructure providers, including Amazon Web Services, Microsoft Azure, and Google Cloud Platform Key features include end-to-end encryption, role-based access control, and the Snowflake Horizon Catalog for governance. The product allows customers to run transactional and analytical workloads on a single platform without managing underlying infrastructure. It supports SQL, Python, and Snowpark for data manipulation.
07. Recent News
In mid-2024, Snowflake was at the center of a large-scale data breach affecting at least 160 organizations, including AT&T and Ticketmaster, resulting in the theft of over 500 million records The incident led to multidistrict litigation in the U.S. District Court for the District of Montana. In February 2024, CEO Frank Slootman retired, and Sridhar Ramaswamy succeeded him A securities class action lawsuit was filed in 2026 alleging misleading statements regarding revenue headwinds and the CEO transition. Snowflake continues to face legal challenges and reputational scrutiny related to the 2024 breach campaign.
08. Dependencies
Fourth parties this vendor relies on - subprocessors, infrastructure, and integrations surfaced from public sources.
09. Competitors
Vendors offering a similar product or service - for side-by-side comparison, not a ranking.
- Vet this vendor →
Databricks
databricks.com
Lakehouse platform with strong ML and data science support
11. Vendor response
Content in this section is vendor-supplied and does not alter Vendorisk.ai's risk tier or evaluation.
Loading claim status
12. Assessment history
- 8/19/2026, 11:51:20 PM · Elevated · 74
Risk delta is hidden until two stored snapshots can be compared.
13. Targeted questions
No unresolved controls
Targeted questions are generated only from unanswered or conflicting controls. The full SIG-lite questionnaire remains on its own route.
14. Sources
- [1] Snowflake is headquartered in Menlo Park, California. Snowflake Inc.
- [2] Snowflake serves over 13,900 global customers. Snowflake Expands Canadian Footprint with Opening of New Toronto Office
- [3] Snowflake reported $4.68 billion in revenue for 2026. Snowflake Inc.
- [4] Snowflake employs approximately 9,000 people. Snowflake Inc.
- [5] Snowflake was founded in 2012. Snowflake Inc.
- [6] Snowflake operates on AWS, Azure, and Google Cloud. Snowflake Inc.
- [7] Snowflake offers SOC 2 Type 2 reports and adheres to NIST 800-53. Trust Center - Snowflake Inc
- [8] Snowflake signed the CISA Secure by Design pledge. Snowflake Security and Trust Center: Built-In Data Protection
- In 2024, attackers used stolen credentials to access customer environments lacking MFA.
AI-generated assessment based on publicly available sources. Verify critical findings before contractual reliance. Analysis is advisory, not a compliance attestation, and is subject to data availability.