Hacker claims 3.6 million Azure account records stolen from major companies

According to BleepingComputer, a threat actor is currently selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortune 500 companies.

The attacker reportedly gained unauthorized access to these enterprise networks by using compromised credentials. As a result, approximately 3.6 million Azure account records have been compromised and put up for sale.

This security incident highlights the persistent risks associated with cloud infrastructure security and credential management. Even robust platforms like Azure remain vulnerable if user access points are insufficiently protected.

Cybersecurity specialists emphasize the critical need for strict multi-factor authentication (MFA) implementation and continuous monitoring of access privileges to prevent large-scale data breaches.

For tech organizations and enterprises globally, including emerging digital markets, this breach serves as a stark reminder of the importance of proactive cloud security measures and rigorous credential hygiene.