Hacker claims 3.6 million Azure account records stolen from major companies
Summary
A threat actor claims to have stolen millions of Azure account records from several Fortune 500 companies by exploiting compromised credentials. The stolen data, allegedly containing employee databases, is being offered for sale on a dark web forum.
IFF Assessment
FOE
The compromise and sale of sensitive customer data represents a significant win for attackers and a loss for defenders.
Defender Context
This incident highlights the ongoing risk of credential stuffing and the importance of robust identity and access management for cloud environments. Defenders should prioritize multi-factor authentication, regular credential rotation, and vigilant monitoring for suspicious login activity on cloud platforms like Azure.