dxc.com Domain Breach Exposure Report

The domain dxc.com exhibits a critical risk score of 100, primarily driven by an overwhelming volume of historical data breaches (90.3%) and a significant number of active infostealer logs (9.7%). The data indicates a substantial exposure of employee and client information, with employee-related events significantly outnumbering client events throughout the observed period, particularly spiking in January 2026. The presence of infostealer logs, including LummaC2, Redline, and Rhadamanthys, suggests ongoing compromise and potential exfiltration of sensitive data. The majority of leaked data originates from combolist sources and database dumps, indicating credential stuffing and direct data compromise. Given the high risk score and the nature of the events, immediate prioritization is required. The focus should be on investigating the root causes of the historical data breaches and actively monitoring for and mitigating ongoing infostealer activity. Remediation efforts should concentrate on strengthening authentication mechanisms, particularly for services like uid.dxc.com and idm.dxc.com, enhancing endpoint security to detect and remove infostealers, and reviewing data access controls to prevent further exfiltration. The prevalence of Windows 11 and Windows 10 operating systems in the telemetry suggests that endpoint security on these platforms is a critical area for review.