2026 Gap Inc. — TheHatman Azure tenant directory sale claim (unverified; ~80K)
Data compromised
Actor-claimed ~80,000 employee directory records with corporate identity and org attributes — unverified
Technical writeup
Unverified forum sale claim — August 16, 2026. TheHatman's Azure tenant dump wave includes Gap Inc. at roughly 80,000 records per Hudson Rock / Infostealers reporting. Researchers also cited infostealer-compromised Microsoft credentials associated with Gap corporate accounts. Gap had not confirmed the listing at indexing. Labeled unverified; distinct from legacy Gap retail breach rows.
Root cause
Unverified cybercrime-forum sale claim: TheHatman alleges Azure/Entra employee directory exfiltration via compromised credentials