bigcartel.com Domain Breach Exposure Report

The telemetry indicates a significant exposure of client data, with over 90,000 historical data breaches and nearly 28,000 active infostealer logs observed over the past year. The majority of these events are linked to "Combolist sources" within leak repositories, suggesting credential stuffing or account takeover attempts. Malware families such as LummaC2, Rhadamanthys, and Redline are prevalent, indicating active compromise and data exfiltration activities targeting client credentials and potentially sensitive information. The timeline shows a notable increase in employee and client-related events from late 2025 into early 2026, with a peak in April 2026. Given the high volume of data breaches and active infostealer logs, coupled with the use of sophisticated malware, this situation presents a critical risk to the organization and its users. The primary focus for remediation should be on immediate credential hygiene, including mandatory password resets for all users, enhanced monitoring for suspicious login activity, and a thorough review of access controls. Investigating the root cause of the data breaches and infostealer activity, particularly concerning the "Combolist sources," is paramount to preventing further compromise and protecting client trust.