2026 Gap Inc. — TheHatman Azure claim (~80K); company says no systems breach, data old
Data compromised
Actor-claimed ~80,000 directory records. Gap: data limited in scope, non-sensitive, dated several years; no evidence corporate systems compromised. Labeled unverified.
Technical writeup
Unverified forum sale with company denial — August 17, 2026. BleepingComputer quoted a Gap Inc. spokesperson: preliminary investigation indicates the advertised data is limited in scope, non-sensitive, and dated several years, with no evidence corporate systems were compromised. TheHatman still lists Gap at ~80,000 Azure internal employee-dump records in a claimed 3.64 million multi-victim wave. Hudson Rock assessed campaign samples as authentic-looking directory exports. BreachHistory keeps recordsAffected 80000 as the actor figure and companyConfirmed false.
Root cause
Unverified TheHatman forum sale of an alleged Azure employee dump; Gap says preliminary investigation found no evidence corporate systems were compromised