Wire · technology
Crook hawks millions of records allegedly plundered from corporate Azure tenants
◆ Sectors
◆ Geography
◆ Source
◆ Verified
Fusion42 · 17 August 2026 · Fusion42 review
A threat actor named TheHatman claims to be selling millions of employee records allegedly stolen from Microsoft Azure environments of major companies including McDonald's, Vodafone, Kyndryl, and Tata Consultancy Services, with data possibly obtained via compromised credentials and infostealer malware.
This Wire brief sits within Fusion42's coverage of Cybersecurity.
◆ ◆ The Wire takeaway
Attackers gained in-depth maps of privileged corporate accounts via stolen Azure credentials, exposing a new vector for data exfiltration and phishing. You need to harden your cloud identity protection now before attackers turn these records into targeted intrusions.
◆ Coverage
1 source · 17 Aug 2026
◆ Related on Wire
◆ Topics