McDonald's hit by massive cyberattack, millions of sensitive data records leaked

A seller has claimed to have breached McDonald's systems, potentially exposing 1.7 million sensitive employee records.

Ransomnews, a cybersecurity news outlet, analyzed a sample of 8,000 records provided by the seller. This sample reportedly contains employee names, email addresses, job titles, departments, phone numbers, and office locations. However, the sample does not include passwords, payment information, or customer data. Investigators noted that the provided file closely resembles a genuine Microsoft Entra ID directory export, with all 50 email domains belonging to McDonald's and some entries using an internal Microsoft domain. The file also exhibits coding errors and technical characteristics typical of system exports.

While the sample appears authentic, not all of the seller's claims have been verified. The 8,000-record sample represents only 0.47% of the claimed 1.7 million records, leaving the total data volume unconfirmed. Furthermore, the absence of dates in the file prevents precise determination of when the data was obtained. McDonald's has not yet commented on the incident, leaving the exact circumstances of the alleged data leak unknown.

This alleged breach may not be an isolated event. The same seller has reportedly made similar announcements regarding Vodafone and Gap Inc. shortly after the McDonald's claim, suggesting the possibility of a broader campaign of cyber incidents targeting major corporations.