2026 Tata Consultancy Services (TCS) — TheHatman Azure DB sale claim (unverified)
Data compromised
Actor-claimed internal TCS database from an Azure tenant (field inventory and volume not independently validated) — unverified. recordsAffected 0 (no attested count in sources reviewed).
Technical writeup
Unverified leak-site / forum sale claim — observed August 10, 2026 on VECERT’s live publications feed naming TCS (Tata Consultancy Services) with actor TheHatman (India). Trade-tracker summaries circulating the same day allege the actor is selling an internal database obtained from an Azure tenant via compromised credentials. Tata Consultancy Services had not issued a matching public confirmation in sources reviewed at indexing. BreachHistory indexes the claim labeled unverified with recordsAffected 0 pending an actor/reporter count or company attestation. Distinct from other TheHatman claims (e.g. Kyndryl) tracked elsewhere.
Root cause
Unverified dark-web / leak-tracker listing: threat actor alias TheHatman claims to be selling an internal TCS database allegedly obtained from an Azure tenant using compromised credentials — TCS had not confirmed at indexing time