Crook hawks millions of records allegedly plundered from corporate Azure tenants
McDonald's, Vodafone, TCS, Kyndryl, and others named as researchers point to compromised credentials
A cybercriminal, going by the name TheHatman, claims to have obtained millions of employee records from the Microsoft Azure systems of numerous organizations, including McDonald's, Vodafone, Kyndryl, and Tata Consultancy Services. Hudson Rock, a security research firm, assessed the data as highly likely authentic, noting consistent corporate email addresses and structures.
The records are believed to include sensitive information such as phone numbers, physical addresses, employee IDs, job titles, departments, and service account details. The attacker alleges to have accessed the data using compromised credentials, though this cannot be independently verified. Hudson Rock suggests the breach might have stemmed from targeted infostealer infections rather than a systemic Azure vulnerability.
All named companies have denied the allegations, with Tata Consultancy Services stating that their systems have not been breached, and Microsoft expressing awareness of the incident but lacking specific details.
Written by urgent.news from The Register's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
