dupont.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting dupont.com, with a risk score of 100. The primary concern stems from 67,987 historical data breaches, accounting for 96.3% of all events. Additionally, 2,590 active infostealer logs were observed, representing 3.7% of events. The timeline shows a surge in employee-related events in September 2025 and January 2026, with client-related events also peaking in September 2025. Malware analysis reveals Redline as the dominant family (71.5%), followed by LummaC2 (7.1%) and Rhadamanthys (5.3%). Targeted services include dupont.com itself and its associated login portals, with the United States being the most frequently observed country. Leak repository analysis shows a high proportion of data originating from combolist sources (59.4%) and database dumps (40.6%). The high volume of historical data breaches and active infostealer logs, coupled with the prevalence of Redline malware, suggests a critical risk of credential compromise and potential further data exfiltration. The focus for remediation should be on strengthening authentication mechanisms, reviewing access controls for services like dupont.com and its login endpoints, and enhancing endpoint security to detect and mitigate infostealer activity. Prioritizing the investigation of the identified data breaches and infostealer logs is crucial to understand the full scope of the compromise and prevent future incidents.