Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

TheHatman alleged Azure and Entra employee data dumps from major companies

Data Leak
First reported
Last updated
Happening score
H score 47
1 unique sources, 1 articles

Summary

Hide ▲

A threat actor is selling alleged Microsoft Azure/Entra employee dumps from multiple major companies, creating immediate risk of spearphishing and tenant-account abuse. The posts, attributed to TheHatman, claim 3.64 million records dated from July 31 to August 16, 2026 across firms such as McDonald's, Tata Consultancy Services, Vodafone, IHG, and Kyndryl. The advertised samples reportedly include employee names, email addresses, phone numbers, postal addresses, service accounts, and other tenant records. Several named companies said they found no evidence of compromise, but the exposed data structure could still support targeted fraud and identity-based attacks.

Related Happenings

HungerRush claimed customer data exposure

Data Leak
H score62 First: 04.03.2026 20:44 Last: 04.03.2026 20:44 Sources 1

About this happening: A threat actor claimed HungerRush customer records were exposed, creating extortion risk for millions of customers and their personal and payment data. The claim surfa...

Open Happening

CarGurus 12.4 million-record data leak

Data Leak
H score61 First: 24.02.2026 20:08 Last: 24.02.2026 20:08 Sources 1

About this happening: A 6.1GB archive tied to CarGurus was published, exposing 12.4 million records and increasing phishing and scam risk for affected users. The dataset includes email ad...

Open Happening

Timeline

  1. 17.08.2026 22:35 1 articles · 2h ago

    TheHatman advertises Azure employee dumps from major companies

    Initial Disclosure

    TheHatman begins posting data dumps allegedly taken from Microsoft Azure tenants after using compromised credentials, advertising employee databases tied to McDonald's, Gap Inc., Vodafone, Tata Consultancy Services, HCL Technologies, InterContinental Hotels (IHG), and Kyndryl.

    Show sources
    Open in new tab
  2. 17.08.2026 22:35 1 articles · 2h ago

    Hudson Rock analyzes leaked Azure dumps as companies deny compromise

    Technical Analysis Update

    TheHatman advertises a claimed 3.64 million-record set that includes an alleged 1.7 million-record McDonald's employee dump and an 800,000-plus-record Tata Consultancy Services Azure dump, while Hudson Rock says the files contain foundational corporate directory attributes, active domains, tenant-specific .onmicrosoft.com structures, service accounts, and global administrator names. Tata Consultancy Services says it found no credible evidence of a breach of TCS systems or customer environments, and Gap Inc. says its preliminary investigation found no evidence that its corporate systems were compromised.

    Show sources
    Open in new tab