airbnb.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting Airbnb, with over 584,000 total events recorded between July 2025 and June 2026. A substantial portion of these events, over 478,000, are classified as historical data breaches, and over 106,000 are identified as active infostealer logs. This suggests a widespread compromise affecting both client and employee data, with a notable spike in employee-related events in January 2026. The primary malware families observed are LummaC2, Acreed, and Redline, all known for credential harvesting and data exfiltration. The data originates predominantly from the United States, Brazil, and India, and the primary leak repository classification is "Combolist sources," indicating mass credential stuffing or reuse attacks.