Hacker claims data theft from McDonald's, Vodafone and other firms' Azure
A data theft attack through stolen credentials targeting the Azure environments of major companies including McDonald's and Vodafone came to light. The hacker claimed to have stolen 3.6 million Azure account records. TheHatman's attack targets were later listed as nine companies, but whether the actual scale of damage was confirmed has not been revealed.
Key facts
- Affected organisation
- McDonald's
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Claimed theft of 3.6 million records from nine companies
- Cause / method
- Theft of Azure cloud credentials
- Location
- Other countries
If your data was exposed
Exposed dataUsernamePassword
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
Timeline
- An Azure credential theft attack targeting companies including McDonald's and Vodafone came to light, and the hacker claimed to have stolen 3.6 million account records.
- The hacker's further claim of stealing millions of records from corporate Azure tenants was reported.
- Nine companies and 3.6 million records were listed as targets of TheHatman's Azure attack.
7 related reports
- Talentsconnect data leak: 5M+ job listings, including Fortune 500 companies, exposed
- Fortune 500 Companies Hit in Azure Data Theft Campaign
- Azure Cloud Credential Theft leads to Data Breach of McDonald’s and Vodafone
- Hacker claims 3.6 million Azure account records stolen from major companies
- Hacker claims millions of records stolen from corporate Azure tenants
- Azure Breach Campaign Claims McDonald's, Vodafone as Victims
- TheHatman Azure Breach: 3.6M Records, 9 Firms Hit [2026]
Other incidents at McDonald's
McDonald's Data on 28 Million Customers Leaked
28mImpact: Information on 28 million customers
Information on 28 million McDonald's customers was leaked. The specific date, how the leak occurred and the response have not been confirmed.
Read on Cybernews ↗McDonald's employee data found in leak, seller claims 1.7 million records stolen
1.7mImpact: Signs of employee data leak; 1.7 million records according to the seller's claim
McDonald's employee information was found in leaked data. The seller of the data claimed to have stolen 1.7 million records, and the claimed scale has not been verified.
Read on Security Affairs ↗Everest claims data theft from McDonald's India business
Impact: Alleged theft of 861GB of data
The Everest ransomware gang claimed to have stolen data from McDonald's India business. The attackers put the size of the stolen data at 861GB. The actual scale of damage and the company's response have not been confirmed.
Related reports: 3 · last report →McDonald's AI recruitment platform exposes 64 million job application records
64mImpact: 64 million job application records
McDonald's AI recruitment chatbot platform McHire exposed 64 million job application records. An admin password set to 123456 and flaws in the chatbot were identified as the cause of the exposure, and applicants in Australia were among those affected.
Related reports: 12 · last report →McDonald's API hacking incident
A hack targeting a McDonald's API took place. The specific timing, scale of the damage and response measures have not been confirmed.
Read on SecurityWeek ↗McDonald's sign hacked to display transgender rights message
Impact: Transgender rights message displayed on restaurant sign
A McDonald's restaurant sign was hacked to display a message about transgender rights. The restaurant's manager disclosed the hack; the exact date and response have not been confirmed.
Read on Jacksonville Journal-Courier ↗McDonald's Instagram account hacked to promote crypto scam
Impact: Attackers claim to have stolen $700,000
McDonald's Instagram account was hacked and used to promote Grimace coin. The attackers claimed to have stolen $700,000 through the crypto scam. McDonald's blocked the attack and removed the posts and the altered profile bio.
Related reports: 5 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.