Hy-Vee Hacked: Infostealers Enable Stormous Group’s 53GB Atlassian Data Heist

Stormous claims to have breached Hy-Vee’s Atlassian Confluence and Jira environments in June 2025 by leveraging credentials stolen via over 50 infostealer infections (e.g., StealC, Lumma, Redline), exfiltrating roughly 53GB of internal data and information related to more than 50,000 individuals; the report highlights the use of infostealers as the primary TTP, the potential for corporate espionage and phishing, and urges stronger endpoint security, MFA, and credential hygiene.