UNC5537 is a threat actor tracked by Mandiant, responsible for the 2024 Snowflake customer data breaches. The group exploited stolen credentials from infostealer malware, targeting accounts without MFA or network allow lists. Their campaign affected at least 165 organizations and exposed data of over 100 million people, leading to significant financial losses and legal consequences.