If it's true that there's 58k users in the dump, that would mean former employees are in the dump
I assume that means McKinsey would need to disclose it, or at least alert the former employees of the breach?
it is weird isn't it?
The register article implies that it's acknowledged by McKinsey- https://www.theregister.com/2026/03/09/mckinsey_ai_chatbot_h...
Edit: Apparently, this is the CEO https://github.com/eth0izzle
>A McKinsey spokesperson told The Register that it fixed all of the issues identified by CodeWall within hours of learning about the problems.
Ah. Thanks for the link. I'm suspicious of everything posted to a blog without proof these days.
Yeah can't find much information either. I would like to see at least some proof. Either via Mckinsey or from the security team.
Re:AI Agent Hacks McKinsey
by philipwhiuk on Wednesday March 11, 2026 @01:35PM
(#47338619)
There's a responsible disclosure timeline at the bottom indicating they'd all been fixed.
Re:AI Agent Hacks McKinsey
by tylervigen on Thursday March 12, 2026 @06:53AM
(#47348956)
I think the point is that we don't have evidence that this actually happened from anyone other than Codewall.
https://www.google.com/search?q=codewall+ai