Back

colgatepalmolive.com Domain Breach Exposure Report

Risk Score

High Risk

Massive event volume or critical assets compromised.

AI Findings Summary

Critical

The telemetry indicates a significant exposure of employee credentials, with 34,488 employee events and 33,110 historical data breaches observed over the reporting period. The primary threat vector appears to be infostealer malware, specifically Redline, which accounts for 1,739 active logs and is associated with 99.9% of malware families detected. This suggests a high risk of credential compromise and potential follow-on attacks targeting employee accounts and sensitive data. The data breaches, comprising 95% of all events, are largely attributed to combolist sources and database dumps, indicating a broad compromise of credential sets.

Total Events

34,849
credential exposure events

Employee Affected Events

34,488
account email domain = colgatepalmolive.com

Client Affected Events

361
service target = colgatepalmolive.com

Free Community Account

Stop stolen credentials from logging in

Own this domain? Create a free Lunar account to see full exposure data and evidence.

12-Month Events Timeline

Event volume by breach date, employee VS client

EmployeesClients
8,0005,3332,6670
peak month 7,803
Jul 25Sep 25Nov 25Jan 26Mar 26May 26Jun 26

Infostealers VS Data Breaches

Live stealer logs VS data breaches

Infostealer logs
Events1,739
Share5%
Data breaches
Events33,110
Share95%
Infostealer logs (5%)
1,739events
Data breaches (95%)
33,110events

34,488 compromised employee accounts pose an infrastructure risk, while 361 leaked client credentials create regulatory liability.

Antivirus Distribution

Security Tools on Infected Endpoints

Windows Defender1
Avira1

Malware Families Distribution

Distribution of Active Stealer Strains

Redline1,738
Aurora1

Top Login URLs

Top exposed services found in the event results

  1. 1colgatepalmolive.com358
  2. 2colgatepalmolive.com:212
  3. 3https://[email protected]1

Infostealer By Geography

Shows the distribution of Infostealer-related credential exposure events across different geographic regions. The location is determined by analyzing the metadata of the infected machines associated with each event.

United States
Events413
Netherlands
Events400
Germany
Events368
Denmark
Events175
United Kingdom
Events52
France
Events29
Belgium
Events29

Country Breakdown

  1. 1United States413
  2. 2Netherlands400
  3. 3Germany368
  4. 4Denmark175
  5. 5United Kingdom52
  6. 6Luxembourg31
  7. 7France29
  8. 8Belgium29

Services Classification Distribution

Blast radius - closer to core = more critical infrastructure, size = credential volume

Citrix71
Git16
Cisco (AnyConnect)15
Pulse Secure13
FortiNet VPN7

Operating System Distribution

Distribution of compromised endpoint builds

Windows Server 2012 x32150
Windows 8 x32127
Windows Server 2016 x32127
Windows Server 2003 R2 x32125
Windows Server 2012 R2 x32123

Leak Repository Classification

Where the exposed records currently reside

0
Named breaches
32,503
Combolist pools
607
Unattributed dumps

Disclaimer: This report includes AI-generated content. AI can make mistakes, so verify important findings independently before taking action.