A Kitchener, Ontario man accused of orchestrating a massive hacking scheme targeting customers of cloud storage provider Snowflake Inc. allegedly posted disturbing messages online about acquiring firearms and committing mass killings, court documents reveal.
Connor Moucka, 25, is at the center of a U.S. extradition case, with authorities alleging he poses a danger to public safety and a flight risk. An unsealed arrest warrant in Ontario last month highlighted alarming online activity attributed to Mr. Moucka, including discussions of “mass mailing” sodium nitrate pills to Black individuals, acquiring weapons “to kill Canadians,” and planning a “suicide by cop.”
In one post dated January 11, a Discord account allegedly linked to Mr. Moucka described plans to mount a machine gun inside a van and remotely “mow down a crowd” while remaining hidden, according to court documents.
Extensive Hacking Scheme Uncovered
U.S. authorities allege Mr. Moucka, along with Turkish resident John Erin Binns, participated in a hacking operation targeting at least 10 companies. The scheme involved using stolen credentials to access sensitive customer data, such as banking details and Social Security numbers, and demanding ransoms under the threat of leaking the information.
Court documents connect the pair to breaches impacting billions of customer records and extortion payments totaling $2.5 million. Companies believed to have been affected include major U.S. firms like AT&T Inc., Neiman Marcus Group Ltd., and Ticketmaster Entertainment.
One high-profile breach saw hackers obtain 50 billion phone call and text message records from an unnamed U.S. telecom provider, which paid a ransom but was targeted again months later.
Arrest and Financial Concerns
Mr. Moucka’s arrest warrant, issued in Seattle on October 10, cited conspiracy, computer fraud, wire fraud, and identity theft. He was apprehended in Kitchener on October 30 after authorities tracked him using his iCloud account.
Investigators also raised concerns about Mr. Moucka’s financial resources, including cryptocurrency wallets containing millions. Court records show one account with a balance of $3.5 million, which officials fear could facilitate his flight.
His aliases, including “Alexander Antonin Moucka” and “judische,” have been linked to other incidents, such as alleged harassment and threats in Montreal last year.
The unsealed documents reveal a troubling pattern of behavior, with the accused allegedly boasting about his criminal activities online and sharing details about his upbringing and personal life.
Awaiting Legal Proceedings
Mr. Moucka is set to appear in court again on Friday, as U.S. authorities seek his extradition. Attempts to reach him for comment were unsuccessful, and Ontario court records indicate he remains unrepresented.
Law enforcement officials have emphasized the potential risks posed by Mr. Moucka, describing him as a public threat. The chilling allegations of both cybercrime and violent intentions have drawn significant attention, highlighting the challenges of addressing digital and physical security in an interconnected world.
