adp.com Domain Breach Exposure Report

The domain adp.com exhibits a high-risk profile, with over 1.18 million historical data breaches and over 236,000 active infostealer logs recorded within the reporting period. The majority of these events, 83.3%, are attributed to historical data breaches, while 16.7% are linked to active infostealer activity. The data indicates a significant exposure affecting over 1.36 million employees and over 1.28 million clients, with a notable surge in employee-related events in January 2026 and client-related events in March 2026. The primary sources of data leakage appear to be combolist sources, accounting for 92.4% of identified leaks. Given the extensive historical data breaches and ongoing infostealer activity, the priority for remediation should focus on credential stuffing prevention and robust data exfiltration detection. The prevalence of infostealer malware families such as Rhadamanthys, LummaC2, and Redline suggests a need for enhanced endpoint security and user awareness training to mitigate the risk of compromised credentials being leveraged in further attacks. The targeted services include critical login portals for ADP's online and recruiting platforms, indicating that attackers are actively attempting to gain access to sensitive employee and client data.