bankofamerica.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting bankofamerica.com, with over 1.3 million total events recorded between July 2025 and June 2026. The majority of these events (86.6%) are classified as historical data breaches, with a substantial number also identified as active infostealer logs (13.4%). The data suggests a widespread compromise affecting both employees and clients, with client-related events significantly outnumbering employee events in the latter half of the reporting period. The primary malware families associated with these events are Rhadamanthys, Redline, and LummaC2, all known for credential theft. The exposure is heavily concentrated in the United States, with secondary impacts noted in India and Venezuela. The data also points to "Combolist sources" and "Database dumps" as the primary leak repository classifications, suggesting credential stuffing and data exfiltration as key attack vectors.