disney.go.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting the disney.go.com domain, with 6029 historical data breaches and 79 active infostealer logs observed between July 2025 and June 2026. The majority of events are linked to historical data breaches, comprising 98.7% of the total, while infostealer activity accounts for 1.3%. A notable surge in employee-related events occurred in January 2026, coinciding with a spike in data breaches. Malware families such as Redline, LummaC2, and Rhadamanthys were identified, with Redline being the most prevalent. The primary targeted services include various login and home pages associated with disney.go.com, and the majority of observed operating systems are Windows variants. The data originates from combolist sources and database dumps, suggesting credential stuffing and data exfiltration risks. Given the high volume of historical data breaches and the presence of active infostealer logs, this exposure poses a critical risk to both employee and client data. The concentration of events in January 2026, particularly the large number of employee-related incidents, warrants immediate investigation to understand the root cause and potential impact. Prioritization should focus on credential compromise detection, data exfiltration monitoring, and strengthening authentication mechanisms for disney.go.com. Remediation efforts should address the identified malware families and secure the targeted services against further exploitation.