broadcom.com Domain Breach Exposure Report

The telemetry indicates a significant exposure of employee and client credentials, with over 348,000 total events recorded between July 2025 and June 2026. Historical data breaches account for 64.4% of these events, while active infostealer logs represent 35.6%. The timeline shows a sharp increase in employee-related events in January 2026, coinciding with a surge in client-related events in March and June 2026. Malware families such as Rhadamanthys and LummaC2 are prevalent, targeting Broadcom's login and registration services, with a notable concentration of affected users in India, Vietnam, and the United States. This extensive credential exposure, particularly from infostealer logs and historical data breaches, presents a high-risk scenario. The targeting of authentication services like "https://profile.broadcom.com/web/registration" and "https://login.broadcom.com/signin" suggests a direct threat to account takeovers and potential downstream impacts. Prioritization should focus on immediate credential reset campaigns for affected employees and clients, enhanced monitoring of authentication logs for suspicious activity, and a thorough review of data breach remediation efforts to prevent recurrence. The prevalence of infostealers indicates a need for user education on phishing and malware risks.