Massive Data Leak from Azure Tenants Affects Major Corporations

A cybercriminal known as 'TheHatman' claims to have stolen millions of employee records from major companies using Microsoft Azure, including 1.7 million records from McDonald's. Other affected organizations include Vodafone, Tata Consultancy Services, and Kyndryl, with the total number of records spanning nine companies. The data includes sensitive information such as employee IDs, job titles, and even accounts with Global Administrator privileges. Hudson Rock assessed the authenticity of the data as highly likely, although the exact method of compromise remains unclear. Possible attack vectors include compromised credentials, phishing, and infostealer malware. The incident highlights the risks associated with inadequate security measures in cloud environments. Companies are currently investigating the breach and its implications.

Key Points: • TheHatman claims to have stolen 1.7 million records from McDonald's Azure tenant. • The breach affects nine major organizations, including Vodafone and Tata Consultancy Services. • Hudson Rock indicates that compromised credentials are likely the attack vector, but specifics remain unconfirmed.