comenity.net Domain Breach Exposure Report

The domain comenity.net has experienced a significant number of data breaches and infostealer events, totaling over 218,000 incidents within the reporting period. The majority of these events, approximately 81%, are categorized as historical data breaches, while 18.8% are active infostealer logs. The timeline indicates a notable increase in employee and client-related events, particularly in March and April of 2026. The primary malware families associated with these events include Rhadamanthys, Redline, and LummaC2, all of which are known for credential harvesting. Given the high volume of data breaches and the prevalence of infostealer malware targeting credentials, this exposure poses a critical risk. The affected entities include over 100 employees and more than 217,000 clients, with the United States being the most frequently observed geography. Remediation efforts should focus on enhancing credential security, implementing robust endpoint detection and response, and conducting thorough investigations into the root causes of the data breaches and infostealer infections.