A threat actor known as "TheHatman" has claimed to have exfiltrated millions of employee records from the Microsoft Azure environments of several Fortune 500 companies. The alleged victims include prominent global businesses such as McDonald's, Vodafone, Kyndryl, and Tata Consultancy Services (TCS).
The claims were reported by Hudson Rock, a cybersecurity intelligence firm. While the attacker has taken credit for the breach and stated that data was stolen from corporate Azure tenants, Microsoft has not yet confirmed the incident or the extent of any potential data compromise. The specific nature of the "employee records" allegedly stolen, beyond the general description, has not been detailed by the attacker.
This incident follows other recent cybersecurity events, including a disclosure by France's tax authority, the General Directorate of Public Finances (DGFiP), which confirmed a data breach affecting 678,000 individuals and professionals. In that case, an alleged attacker using the alias "ZeroBytes" claimed responsibility on a cybercrime forum and offered a stolen database for sale.
Separately, cryptocurrency wallet provider SafePal reported a data breach impacting 39,798 customers. The company attributed this exposure to an authorization flaw within a plug-in used for order tracking. This vulnerability, under specific conditions, allowed one customer to view another customer's order information, which included names, email addresses, shipping addresses, phone numbers, and purchase details.
These incidents underscore a period of heightened cyber activity, with various threat actors targeting a range of organizations and individuals. The claims made by "TheHatman" regarding the Azure breaches are currently unverified by the affected parties, but they highlight the ongoing challenges in securing cloud environments and protecting sensitive corporate data.
