bbc.co.uk Domain Breach Exposure Report

The telemetry indicates a significant exposure event affecting bbc.co.uk, with 91,509 historical data breaches and 5,051 active infostealer logs observed between July 2025 and June 2026. The majority of these events are linked to "Combolist sources" and "Database dumps," suggesting compromised credentials. Malware families such as LummaC2, Redline, and Rhadamanthys are prevalent, targeting Windows operating systems. The "careershub.bbc.co.uk" service appears to be a primary target for these attacks. Geographically, the United Kingdom is the most affected country, followed by India and Kenya. Given the high volume of historical data breaches and active infostealer activity, this poses a critical risk. The prevalence of credential stuffing attacks targeting the careers portal indicates a strong likelihood of unauthorized access to employee or client accounts. Prioritization should focus on immediate credential reset campaigns for affected services, enhanced monitoring for suspicious login activity, and a review of access controls for the careers hub. Further investigation into the root cause of the database dumps and combolist exposures is also recommended.