A threat actor identified as 'TheHatman' is selling data allegedly stolen from Azure tenants of multiple Fortune 500 companies, including McDonald's, TCS, and Vodafone. The leaked data, which includes millions of records, was reportedly exfiltrated using compromised credentials. McDonald's data is the largest, containing over 1.7 million records.
Key details from the leaked information encompass employee names, email addresses, and sensitive corporate data, which could facilitate targeted attacks like spear-phishing. The breach poses severe risk by enabling attackers to identify high-value targets within these organizations.