2026 HCLTech — TheHatman Azure claim (~250K); exchange filing denies systems breach
Data compromised
TheHatman actor-claimed ~250,000 Azure directory records in Aug 2026 wave; company Aug 11 exchange filing said no evidence of systems breach and data may be limited/old — unverified actor count with company denial
Technical writeup
Unverified actor claim with company denial — August 11, 2026 HCLTech stock-exchange clarification after media reports of a hacker-group employee-data allegation stated no evidence of a breach of its systems and no client impact, adding referenced data may be limited and several years old. August 16, 2026 Hudson Rock / Infostealers placed HCL Technologies in TheHatman's Azure exfiltration campaign at roughly 250,000 directory records with infostealer-linked Azure credential telemetry — actor-side, not company-attested. BreachHistory updates recordsAffected to 250000 labeled unverified alongside the exchange denial. Distinct from HCLTech's 2023 isolated-cloud ransomware row.
Root cause
Unverified hacker-group/media claim of limited employee-data exposure — HCLTech exchange filing Aug 11, 2026 says no evidence of systems breach and data may be limited and several years old