Snowflake Security Advisory
Updated: June 11, 2024
Zywave does utilize Snowflake within the enterprise as a repository for a portion of application data. To date, Snowflake has not informed Zywave that any Zywave data or access to Zywave data was included in their incident investigation. However, in response to general security advisories published by Snowflake beginning on May 30, 2024, Zywave initiated an investigation to determine if the potential exposure included any Zywave data access. After completing a detailed investigation, Zywave found no known indications of compromise on any Zywave Snowflake accounts.
Zywave continues to follow recommended best practices for securing Snowflake accounts, including multi-factor authentication, as well as security defenses aimed at preventing credential attacks. Not only in response to this specific incident, but also in response to the ever-changing security landscape, Zywave continues to evaluate and modify its security posture.