DATABASE [LEAK] Tesla, Inc. — Azure AD Full Dump — Users, Groups, SPNs, Service Principals, O

(07-06-2026, 12:42 PM)CosmoCat Wrote: [LEAK] Tesla, Inc. — Azure AD Full Dump — Users, Groups, SPNs, Service Principals, OAuth Tokens

https://portal.azure.com/ — tesla.com tenant | 47,831 objects dumped

ex data:

objectId,displayName,userPrincipalName,mail,jobTitle,department,officeLocation
d7b3f41a-8c9e-4a62-a3d1-7f2e1c5b0984,Connor Whitfield,c.whitfield@tesla.com,connor.whitfield@tesla.com,Senior DevOps Engineer,Infrastructure,Sparks
e29a5c87-41b2-486d-9f3e-0c7a1d6f5823,Lena Hofstadter,l.hofstadter@tesla.com,lena.hofstadter@tesla.com,Supply Chain Manager,Global Sourcing,Austin
f41c6b89-5e7d-4723-b80a-1d9f2a4c3e67,Rafael Cordova,r.cordova@tesla.com,rafael.cordova@tesla.com,HRIS Analyst,People Operations,Fremont
8a2d7e91-c3f6-4b15-a08c-5e4f2d7b1a93,Priya Sankaran,p.sankaran@tesla.com,priya.sankaran@tesla.com,QA Lead,Software Quality,Berlin

objectId,securityGroup,description,memberCount,visibility,createdDateTime,owners
3f8e1c2a-7d4b-49f1-a6e2-9c5b0f3a8d71,SG-Tesla-All-Employees,All active Tesla employees,127,443,Organization,2022-01-15T08:00:00,it-admin@tesla.com
6b4f9d2e-a1c7-48d3-b5f0-4e8a2b6c9d13,SG-Autopilot-Engineers,Autopilot & FSD engineering team,3,842,Private,2023-03-22T14:30:00,eng-admin@tesla.com
c91d5f7e-3a2b-4e86-9c10-7f6d1a4b8e25,SG-Domain-Admins,Domain administrators — highly privileged,18,Hidden,2021-06-10T09:15:00,it-admin@tesla.com

type,appId,displayName,appOwnerOrganizationId,keyCredentials,passwordCredentials,oauth2PermissionScopes,identifierUri
ServicePrincipal,2e7f1b4a-9d6c-4f35-80ae-3c1b7a5d8e92,TeslaFleetAPI-Prod,tesla.com,1 valid,1 valid (exp: 2027-04-19),Fleet.ReadWrite.All Telemetry.Read.All,api://tesla-fleet-prod.azurewebsites.net
ServicePrincipal,5a8c3d1e-7f2b-4e49-96d0-1f4a8b6c2e37,Tesla-SSO-Production,tesla.com,2 valid,1 valid (exp: 2026-12-31),User.Read.All Directory.Read.All Mail.Read,https://sso.tesla.com
ServicePrincipal,9b4d7f2c-8e1a-45d3-b60c-3a7f5d2e1b48,Tesla-Internal-Tools,tesla.com,1 valid,1 valid (exp: 2028-02-14),Application.ReadWrite.All Group.ReadWrite.All,https://tools.internal.tesla.com

deviceId,displayName,operatingSystem,owner,trustType,lastSeen,compliant,primaryUser
1c4a8e3b-7d2f-4f95-a1b6-9e3c5f0d2a87,LAPTOP-FMT-0184,macOS,c.whitfield@tesla.com,AzureAD Joined,2026-07-05T19:42:11,true,c.whitfield@tesla.com
7e3d9f2b-1a5c-4e87-b4d0-8f2c6a0e1b93,SRV-FMT-DC02,Windows Server 2022,svc_fmt_dc02@tesla.com,Hybrid AzureAD Joined,2026-07-06T02:30:00,true,svc_fmt_dc02@tesla.com
4b2f7d8c-6e9a-43d1-8f5b-0c2a1e3d7f49,DESKTOP-AUS-0291,Windows 11,l.hofstadter@tesla.com,AzureAD Joined,2026-07-04T08:15:37,true,l.hofstadter@tesla.com

roleId,roleName,scope,assignedCount,builtIn,isPrivileged
62e90394-69f5-4237-9190-012177145e10,Global Administrator,/,7,true,true
f023fd81-a637-4b56-9cc9-1b17a0f6c6d1,Privileged Role Administrator,/,4,true,true
194ae4cb-b126-40b2-bd5b-6091b380977d,Security Administrator,/,12,true,true
9b2c4e6f-1a3d-4f57-b8c0-5e7f2d1a3b68,Exchange Administrator,/,9,true,true


Included in dump:

• 47,831 user objects (UPN, mail, jobTitle, department, phone, manager chain, group memberships)
  
• 1,247 security groups with full member enumeration
  
• 89 Service Principals (TeslaFleetAPI, Tesla-SSO, Tesla-Internal-Tools) with valid credentials
  
• Multiple valid OAuth 2.0 access + refresh tokens (Graph API, Exchange Online, Azure DevOps)
  
• 31,502 registered devices (macOS, Windows, Linux) with compliance state
  
• Full PIM/PAM role assignments including all Global Admins
  
• Conditional Access policies, MFA exclusion groups, break-glass accounts
  
• Azure Key Vault references (non-exfiltrated — network restricted)
  
  
  

FULL LEAK AVAILABLE — Contact for pricing

wow

I needed some time to clean, sort, and pack all the leaked data. Everything is ready now — full Tesla Azure AD dump, customer DB, employee records, API keys, tokens.

If you want access, contact me on Tox

(07-06-2026, 12:42 PM)CosmoCat Wrote: [LEAK] Tesla, Inc. — Azure AD Full Dump — Users, Groups, SPNs, Service Principals, OAuth Tokens

https://portal.azure.com/ — tesla.com tenant | 47,831 objects dumped

ex data:

objectId,displayName,userPrincipalName,mail,jobTitle,department,officeLocation
d7b3f41a-8c9e-4a62-a3d1-7f2e1c5b0984,Connor Whitfield,c.whitfield@tesla.com,connor.whitfield@tesla.com,Senior DevOps Engineer,Infrastructure,Sparks
e29a5c87-41b2-486d-9f3e-0c7a1d6f5823,Lena Hofstadter,l.hofstadter@tesla.com,lena.hofstadter@tesla.com,Supply Chain Manager,Global Sourcing,Austin
f41c6b89-5e7d-4723-b80a-1d9f2a4c3e67,Rafael Cordova,r.cordova@tesla.com,rafael.cordova@tesla.com,HRIS Analyst,People Operations,Fremont
8a2d7e91-c3f6-4b15-a08c-5e4f2d7b1a93,Priya Sankaran,p.sankaran@tesla.com,priya.sankaran@tesla.com,QA Lead,Software Quality,Berlin

objectId,securityGroup,description,memberCount,visibility,createdDateTime,owners
3f8e1c2a-7d4b-49f1-a6e2-9c5b0f3a8d71,SG-Tesla-All-Employees,All active Tesla employees,127,443,Organization,2022-01-15T08:00:00,it-admin@tesla.com
6b4f9d2e-a1c7-48d3-b5f0-4e8a2b6c9d13,SG-Autopilot-Engineers,Autopilot & FSD engineering team,3,842,Private,2023-03-22T14:30:00,eng-admin@tesla.com
c91d5f7e-3a2b-4e86-9c10-7f6d1a4b8e25,SG-Domain-Admins,Domain administrators — highly privileged,18,Hidden,2021-06-10T09:15:00,it-admin@tesla.com

type,appId,displayName,appOwnerOrganizationId,keyCredentials,passwordCredentials,oauth2PermissionScopes,identifierUri
ServicePrincipal,2e7f1b4a-9d6c-4f35-80ae-3c1b7a5d8e92,TeslaFleetAPI-Prod,tesla.com,1 valid,1 valid (exp: 2027-04-19),Fleet.ReadWrite.All Telemetry.Read.All,api://tesla-fleet-prod.azurewebsites.net
ServicePrincipal,5a8c3d1e-7f2b-4e49-96d0-1f4a8b6c2e37,Tesla-SSO-Production,tesla.com,2 valid,1 valid (exp: 2026-12-31),User.Read.All Directory.Read.All Mail.Read,https://sso.tesla.com
ServicePrincipal,9b4d7f2c-8e1a-45d3-b60c-3a7f5d2e1b48,Tesla-Internal-Tools,tesla.com,1 valid,1 valid (exp: 2028-02-14),Application.ReadWrite.All Group.ReadWrite.All,https://tools.internal.tesla.com

deviceId,displayName,operatingSystem,owner,trustType,lastSeen,compliant,primaryUser
1c4a8e3b-7d2f-4f95-a1b6-9e3c5f0d2a87,LAPTOP-FMT-0184,macOS,c.whitfield@tesla.com,AzureAD Joined,2026-07-05T19:42:11,true,c.whitfield@tesla.com
7e3d9f2b-1a5c-4e87-b4d0-8f2c6a0e1b93,SRV-FMT-DC02,Windows Server 2022,svc_fmt_dc02@tesla.com,Hybrid AzureAD Joined,2026-07-06T02:30:00,true,svc_fmt_dc02@tesla.com
4b2f7d8c-6e9a-43d1-8f5b-0c2a1e3d7f49,DESKTOP-AUS-0291,Windows 11,l.hofstadter@tesla.com,AzureAD Joined,2026-07-04T08:15:37,true,l.hofstadter@tesla.com

roleId,roleName,scope,assignedCount,builtIn,isPrivileged
62e90394-69f5-4237-9190-012177145e10,Global Administrator,/,7,true,true
f023fd81-a637-4b56-9cc9-1b17a0f6c6d1,Privileged Role Administrator,/,4,true,true
194ae4cb-b126-40b2-bd5b-6091b380977d,Security Administrator,/,12,true,true
9b2c4e6f-1a3d-4f57-b8c0-5e7f2d1a3b68,Exchange Administrator,/,9,true,true


Included in dump:

• 47,831 user objects (UPN, mail, jobTitle, department, phone, manager chain, group memberships)
  
• 1,247 security groups with full member enumeration
  
• 89 Service Principals (TeslaFleetAPI, Tesla-SSO, Tesla-Internal-Tools) with valid credentials
  
• Multiple valid OAuth 2.0 access + refresh tokens (Graph API, Exchange Online, Azure DevOps)
  
• 31,502 registered devices (macOS, Windows, Linux) with compliance state
  
• Full PIM/PAM role assignments including all Global Admins
  
• Conditional Access policies, MFA exclusion groups, break-glass accounts
  
• Azure Key Vault references (non-exfiltrated — network restricted)
  
  
  

FULL LEAK AVAILABLE — Contact for pricing

woow