Back Securityaffairs.Co

McDonald’s Employee Data Appears in Leak, Seller Claims 1.7M Records Stolen

Securityaffairs.Co •Pierluigi Paganini • August 17, 2026

A seller claims 1.7M McDonald’s employee records were stolen from Azure. An 8,000-row sample appears genuine, but its age and full size remain unconfirmed. A seller on a data-trading forum posted an 8,000-row sample this week claiming it came from McDonald’s own Azure tenant, part of a supposed 1.7 million-record employee directory obtained using stolen […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Massive Azure Data Breach Exposes 3.6 Million Employee Records from Major Corporations A threat actor known as 'TheHatman' has claimed responsibility for a significant data breach involving employee directories from nine major companies, including McDonald's, Vodafone, and Tata Consultancy Services (TCS). The attacker is selling approximately 3.6 million records, which were allegedly extracted from Microsoft Azure and Entra environments using compromised credentials. The leaked data includes sensitive information such as employee names, email addresses, phone numbers, job titles, and organizational structures. Cybersecurity firm Hudson Rock has assessed the data as likely authentic, although the exact method of access remains unclear. Potential attack vectors include infostealer malware, phishing, and weak multi-factor authentication practices. Affected companies have not confirmed the breach, with some stating that the data appears outdated. The incident raises concerns about the risks of social engineering and targeted phishing attacks against employees. 30 sources 67

McDonald’s Employee Data Appears in Leak, Seller Claims 1.7M Records Stolen

The full story

Extracted Entities

Attack Types (1)

Companies (2)