Back

autoliv.com Domain Breach Exposure Report

Risk Score

High Risk

Massive event volume or critical assets compromised.

AI Findings Summary

Critical

The telemetry indicates a significant exposure impacting autoliv.com, with 46,734 historical data breaches and 2,987 active infostealer logs observed over the reporting period. The majority of these events are linked to "Combolist sources" (76.3%) and "Database dumps" (23.7%), suggesting compromised credentials and potentially sensitive data exfiltration. Malware families such as Redline (56.4%), Rhadamanthys (16.6%), and LummaC2 (5.2%) are prevalent, commonly associated with credential theft and information stealing activities. The timeline shows a surge in employee and client-related events in September 2025 and January 2026, correlating with periods of increased infostealer activity. Given the high volume of data breaches and the prevalence of infostealer malware targeting credentials, this situation presents a critical risk. The focus should be on immediate credential hygiene, including mandatory password resets for all employees and clients, and enhanced monitoring for suspicious login activity across all targeted services, particularly guest portals. Investigating the root cause of the database dumps and combolist exposures is paramount to prevent further data loss and potential downstream impacts.

Total Events

49,721
credential exposure events

Employee Affected Events

46,256
account email domain = autoliv.com

Client Affected Events

3,465
service target = autoliv.com

Free Community Account

Stop stolen credentials from logging in

Own this domain? Create a free Lunar account to see full exposure data and evidence.

12-Month Events Timeline

Event volume by breach date, employee VS client

EmployeesClients
15,00010,0005,0000
peak month 12,568
Jul 25Sep 25Nov 25Jan 26Mar 26May 26Jun 26

Infostealers VS Data Breaches

Live stealer logs VS data breaches

Infostealer logs
Events2,987
Share6%
Data breaches
Events46,734
Share94%
Infostealer logs (6%)
2,987events
Data breaches (94%)
46,734events

46,256 compromised employee accounts pose an infrastructure risk, while 3,465 leaked client credentials create regulatory liability.

Antivirus Distribution

Security Tools on Infected Endpoints

Windows Defender134
Kaspersky1

Malware Families Distribution

Distribution of Active Stealer Strains

Redline1,685
Rhadamanthys495
LummaC2154
Vidar26
Raccoon18
Acreed9
RisePro9
StealC6
Aurora1

Top Login URLs

Top exposed services found in the event results

  1. 1autoliv.com775
  2. 2https://guestap.autoliv.com/699
  3. 3https://guesteu.autoliv.com/178
  4. 4https://guestap.autoliv.com:8443/portal/PortalSetup.action158
  5. 5guesteu.autoliv.com117
  6. 6https://guesteu.autoliv.com109
  7. 7guestap.autoliv.com96
  8. 8https://guestap.autoliv.com86
  9. 9https://guestna.autoliv.com/71
  10. 10guesteu.autoliv.com/60

Infostealer By Geography

Shows the distribution of Infostealer-related credential exposure events across different geographic regions. The location is determined by analyzing the metadata of the infected machines associated with each event.

United States
Events468
Philippines
Events422
Netherlands
Events395
Germany
Events339
Denmark
Events166
Brazil
Events139
France
Events74
India
Events49

Country Breakdown

  1. 1United States468
  2. 2Philippines422
  3. 3Netherlands395
  4. 4Germany339
  5. 5Denmark166
  6. 6Brazil139
  7. 7France74
  8. 8India49

Services Classification Distribution

Blast radius - closer to core = more critical infrastructure, size = credential volume

Microsoft167
F5106
Citrix67
Cisco (AnyConnect)26
Git12
FortiNet VPN8
Jira (Atlassian)3

Operating System Distribution

Distribution of compromised endpoint builds

Windows 11 24H2 build 26100 (64 Bit)454
Windows 10 Pro (10.0.19045) x64141
Windows 10 Home x32129
Windows Server 2008 R2 x32120
Windows Server 2012 x32119

Leak Repository Classification

Where the exposed records currently reside

0
Named breaches
35,639
Combolist pools
11,095
Unattributed dumps

Disclaimer: This report includes AI-generated content. AI can make mistakes, so verify important findings independently before taking action.