cencora.com Domain Breach Exposure Report

The domain cencora.com has experienced a significant number of data breach events (247) and active infostealer logs (28) over the past year, totaling 275 incidents. The majority of these events are historical data breaches (89.8%), with a notable portion involving active infostealer activity (10.2%). Malware families such as Rhadamanthys, LummaC2, Redline, and Vidar are associated with the infostealer logs. The timeline indicates a sharp increase in employee-related events in April 2026 and June 2026, alongside a surge in client-related events in March 2026. Leak repository data shows a substantial amount of information originating from database dumps (78.9%) and combolist sources (21.1%). The high volume of data breaches and active infostealer logs, coupled with the presence of multiple infostealer malware families, indicates a critical exposure. The recent spikes in employee and client-related events suggest ongoing compromise or exploitation. Prioritization should focus on investigating the root cause of the historical data breaches and actively mitigating the current infostealer threats, particularly those targeting employee and client credentials. Remediation efforts should include enhanced endpoint security, credential hygiene, and thorough analysis of the compromised data sources.