cisco.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting cisco.com, with over 2.9 million total events recorded between July 2025 and June 2026. The majority of these events, approximately 86%, are classified as historical data breaches, while the remaining 14% are active infostealer logs. The data shows a substantial increase in both employee and client-related events, particularly in January 2026, suggesting a widespread compromise or a surge in malicious activity targeting the organization. The presence of infostealer malware families like Redline, LummaC2, and Rhadamanthys, along with targeted access to Cisco's identity and authentication services, points to a sophisticated attack aimed at credential harvesting and potential further exploitation.