360.com Domain Breach Exposure Report

The telemetry indicates a significant exposure of 360.com, with 7,766 historical data breaches and 448 active infostealer logs observed between July 2025 and June 2026. The majority of these events (94.5%) are attributed to historical data breaches, while 5.5% are linked to active infostealer activity. Employee and client data appear to be the primary targets, with 5,888 employee-related events and 2,326 client-related events recorded. Malware families such as Redline, Acreed, and Rhadamanthys are frequently associated with these incidents, often originating from China, Mexico, and the United States. The exposure is further compounded by the presence of data in "Combolist sources" and "Database dumps" repositories. Given the high volume of historical data breaches and ongoing infostealer activity, this exposure presents a critical risk. The prevalence of infostealer malware targeting credentials and the potential for sensitive employee and client information to be compromised necessitates immediate attention. Prioritization should focus on identifying the root causes of the historical breaches, enhancing defenses against current infostealer threats, and implementing robust data exfiltration prevention measures. Remediation efforts should include credential hygiene, network segmentation, and continuous monitoring for anomalous access patterns.