<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[McDonald’s, TCS, Vodafone & HCLTech reportedly caught up in massive Azure data exfiltration campaign]]></title><description><![CDATA[<p dir="auto">An alleged campaign linked to TheHatman is reportedly offering Azure/Entra ID directory dumps containing huge numbers of employee records, including a claimed 1.7M+ records from McDonald’s and 800K+ from TCS.</p>
<p dir="auto">Stolen credentials, session tokens and overprivileged APIs can potentially give attackers access to entire corporate directories.</p>
<p dir="auto">The leaked data reportedly includes employee identities, job titles, departments, reporting relationships, service accounts and privileged account information, creating a powerful roadmap for phishing, BEC and more.</p>
]]></description><link>https://forum.ieu.app/topic/2768edcc-de0d-48d4-bf82-a01af682f083/mcdonald-s-tcs-vodafone-hcltech-reportedly-caught-up-in-massive-azure-data-exfiltration-campaign</link><generator>RSS for Node</generator><lastBuildDate>Sat, 05 Sep 2026 17:12:27 GMT</lastBuildDate><atom:link href="https://forum.ieu.app/topic/2768edcc-de0d-48d4-bf82-a01af682f083.rss" rel="self" type="application/rss+xml"/><pubDate>Mon, 17 Aug 2026 07:47:37 GMT</pubDate><ttl>60</ttl></channel></rss>