Fortune 500 Companies Hit in Azure Data Theft Campaign

By Chief Engineer in News 2026-08-17

A threat actor known as “TheHatman” is advertising millions of employee records allegedly stolen from Azure/Entra tenants of Fortune 500 firms including McDonald’s (1.7M+ records), TCS (800k), Vodafone (425k), HCL, IHG, Kyndryl, Gap, Hexaware, and Wyndham. Data appears to consist of legitimate Azure directory exports containing names, emails, phone numbers, job titles, manager details, group memberships, service accounts, and privileged accounts. Hudson Rock assesses the data as highly likely authentic and attributes the campaign to compromised credentials from a targeted infostealer operation rather than an Azure zero-day. Exposed privileged and service accounts raise risks of follow-on spear-phishing and privilege-escalation attacks.

https://www.securityweek.com/fortune-500-companies-hit-in-azure-data-theft-campaign/

Tags: Consulting, CyberSec

WalkureARCH delivers engineering research, development, and investment in cutting-edge technology. We evaluate emerging technologies, design practical solutions, and develop capabilities that strengthen resilience, improve performance, and create durable competitive advantage. We are proud of our work with leading organizations in the IT industry to advance AI, cybersecurity, cloud and IT infrastructure solutions for the enterprise systems of today and the future.

At our core is The WalkureARCH ADVANTAGE: Responsive Enterprise / Responsive Systems (RE/RS)–a unified business/systems framework that can understand challenges, assess, adapt, and overcome as a continuous process. We help our clients continuously understand challenges to their IT systems, assess operational impact, adapt with discipline, and overcome by evolving. The result is technology innovation grounded in sound engineering: secure by design, scalable in operation, and positioned to deliver lasting value.