360.cn Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting approximately 99,821 clients and 546 employees of 360.cn between July 2025 and June 2026. The primary drivers of this exposure are historical data breaches, accounting for over 81,000 incidents, and active infostealer logs, totaling over 19,000. The data suggests a high volume of client-related data breaches, with notable spikes in August 2025, September 2025, and March 2026. Infostealer activity is also a major concern, with malware families like Rhadamanthys and Redline being prevalent. Given the high volume of data breaches and the prevalence of infostealer malware targeting client data, this incident warrants immediate attention. The focus should be on identifying the root cause of the data breaches, enhancing client data protection measures, and strengthening defenses against infostealer malware. Prioritization should be given to understanding the scope of compromised client data and implementing rapid remediation to prevent further exploitation. The targeted services, primarily related to 360's cloud storage (yunpan.360.cn) and authentication endpoints, suggest potential avenues for attack.