Millions of stolen records allegedly dumped online by mystery "Hatman" hacker — McDonalds, Vodafone and more see Microsoft Azure records stolen
Some affected companies argue the data is years old and claim no breach in their systems.
A hacker known as "TheHatman" claims to have stolen millions of Azure and Entra employee records from major firms such as McDonald's, Tata Consultancy Services, Vodafone, HCL Technologies, InterContinental Hotels Group, Kyndryl, Gap Inc., Hexaware Technologies, and Wyndham Hotels. The stolen data includes personal information like names, emails, job titles, and more.
Security researchers have analyzed the samples and confirmed that they are consistent with Azure directory exports, containing highly privileged account records. The risks of this breach are significant, as cybercriminals could use the stolen information to impersonate business partners or clients, potentially leading to fraudulent activities and material consequences.
Most organizations have not yet issued an official statement regarding these claims, with some suggesting that the attackers might have repackaged data from older incidents. However, security researchers believe that the stolen credentials were obtained through an infostealer infection rather than through password spraying or MFA fatigue.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
