arrow.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event affecting approximately 60,495 employees and 21,632 clients of arrow.com between July 2025 and June 2026. This exposure is primarily characterized by a high volume of historical data breaches (77,791 events) and active infostealer logs (4,336 events), with Redline malware being the most prevalent. The data suggests a large portion of the compromised data originates from combolist sources and database dumps, indicating potential credential stuffing or large-scale data exfiltration. Given the high risk score of 100 and the sheer volume of data breaches and infostealer activity, this incident poses a critical threat. The prevalence of Redline, LummaC2, and Rhadamanthys infostealers suggests a broad campaign targeting user credentials and sensitive information. Remediation efforts should focus on immediate credential rotation for all affected employees and clients, enhanced monitoring for anomalous access patterns, and a thorough review of data security controls, particularly concerning the handling of credentials and database integrity.