McDonald’s, Vodafone Hit by Azure Credential Theft Campaign Exposing Millions of Enterprise Records

A sprawling Azure data exfiltration campaign is unfolding across the dark web, with a threat actor systematically selling off internal employee directories stolen from some of the world’s largest corporations. The seller, operating under the alias “TheHatman,” claims to have pulled these records directly from victim organizations’ Azure and Entra tenants using compromised credentials, and the volume of data on offer is staggering. Over the past week, TheHatman has flooded underground forums with listings for at least nine Fortune 500-level enterprises spanning IT services, hospitality, telecommunications, retail, and logistics. McDonald’s Corporation tops the list with more than 1.7 million exposed...

Read the full article at the source.