complex.com Domain Breach Exposure Report

The telemetry indicates a significant historical data breach affecting 2,408 records, alongside 171 active infostealer logs. The majority of the exposure stems from database dumps (69.2%) and combolist sources (30.8%). Malware families like Redline, LummaC2, and Rhadamanthys are prevalent in the infostealer activity. Employee and client data appear to be the primary targets, with a notable surge in employee-related events in January 2026. The domain complex.com and its authentication endpoints are frequently targeted. Geographically, Thailand shows the highest concentration of related events. Given the high volume of historical data breaches and active infostealer activity, this exposure presents a critical risk. The prevalence of common infostealer malware suggests a broad attack surface. Prioritization should focus on immediate remediation of exposed credentials, comprehensive security audits of authentication mechanisms, and enhanced monitoring for further data exfiltration. The significant historical breach necessitates a review of past incident response and data protection measures.