Crook hawks millions of records allegedly plundered from corporate Azure tenants
McDonald's, Vodafone, TCS, Kyndryl, and others named as researchers point to compromised credentials
A cybercriminal, known as TheHatman, is advertising access to millions of employee records that were allegedly stolen from the Microsoft Azure environments of major companies. The alleged data set spans nine organizations, with McDonald's holding the largest amount - 1.7 million records. Other companies affected include Tata Consultancy Services (800,000 records), Vodafone (425,000 records), HCL Technologies (250,000 records), IHG Hotels & Resorts, Kyndryl, Gap, Hexaware Technologies, and Wyndham Hotels & Resorts.
The data reportedly includes more than just names and email addresses, containing potentially sensitive information such as phone numbers, physical addresses, job titles, department information, and service account details. It is unclear how TheHatman acquired the information, but Hudson Rock, the security research shop that assessed the data, believes it was likely obtained through compromised credentials.
The company has stated they have strong safeguards against techniques like password spray and MFA fatigue, and continue to monitor their systems closely.
Written by urgent.news from The Register Science's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
