coolmath-games.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting 2,075 clients and 4 employees, primarily through historical data breaches and active infostealer logs. The data breaches, accounting for 91.8% of events, suggest a large-scale compromise of client credentials, likely sourced from "Combolist sources." Infostealer activity, representing 8.2% of events, is predominantly linked to malware families such as Rhadamanthys and Redline, with a notable concentration of targeted activity against the "coolmath-games.com" domain and its associated signup pages. The timeline shows a surge in client-related events in March 2026, coinciding with increased employee exposure in January and February 2026. Given the high volume of historical data breaches and the presence of active infostealer campaigns targeting client-facing services, this incident poses a high risk of account takeover, identity theft, and further downstream compromises. Prioritization should focus on immediate remediation of exposed client accounts, including credential resets and enhanced monitoring for suspicious activity. For employees, a review of access controls and security awareness training is recommended. The prevalence of Windows 11 and Windows 10 operating systems among affected endpoints suggests a need for endpoint security enhancements and malware detection capabilities.