bestbuy.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting bestbuy.com, with over 1.1 million historical data breaches and 138,000 active infostealer logs detected within the reporting period. The majority of these events are attributed to combolist sources, suggesting credential stuffing or account takeover attempts. The timeline shows a substantial increase in client-related events starting in September 2025, coinciding with a surge in employee-related events in January 2026. Malware families such as Rhadamanthys, LummaC2, and Redline are prevalent, indicating active credential harvesting and data exfiltration. The primary affected geography is the United States. Given the high volume of data breaches and active infostealer logs, this exposure poses a critical risk to both clients and employees. The prevalence of credential-based attacks and infostealer malware necessitates immediate focus on credential hygiene, multi-factor authentication enforcement, and enhanced monitoring for anomalous login activity. Remediation efforts should prioritize securing customer and employee accounts against further compromise and investigating the root cause of the data breach and infostealer activity.