Not their fault. Snowflake was breached. And the data was with Snowflake.
> hundreds of Snowflake customer credentials ... of staffers who have access to their employer’s Snowflake environment ... credentials available online linked to Snowflake environments suggests an ongoing risk to customers who have not yet changed their passwords or enabled MFA.
This is just trivial pivoting done with some guesswork done fairly well.