💥 BREACHES & INCIDENTS
- TheHatman Sells Azure Directory Data From Nine Major Enterprises TheHatman is selling employee directories allegedly stolen from Azure and Entra tenants.
- Affected organizations include McDonald's, TCS, Vodafone, HCL Technologies, IHG, Kyndryl, Gap, Hexaware and Wyndham.
- Listings include about 1.7 million McDonald's records, 800,000 TCS records, 425,000 Vodafone records and 250,000 HCL records.
- Exposed data includes names, emails, phone numbers, addresses, employee IDs, roles, reporting lines, service accounts and some Global Administrator listings.
- TheHatman claims the directories were downloaded from Azure and Entra tenants using compromised credentials.
- Hudson Rock linked compromised Azure credentials at most victims to infostealer-infected machines; phishing, session-token theft and overprivileged APIs remain possible vectors. 📄 Source: infostealers.com · 📎 Coverage: cybersecuritynews.com · 👁 via Cyber Security News, cryptika.com (discovered)