ebay.com.au Domain Breach Exposure Report

The telemetry indicates a significant exposure impacting approximately 446,240 clients and 456 employees of ebay.com.au between July 2025 and June 2026. This exposure is primarily characterized by a large volume of historical data breaches (394,938 events) and active infostealer logs (51,758 events). The data breaches are predominantly sourced from "Combolist sources," suggesting credential stuffing or account takeover attempts. Infostealer activity is linked to malware families such as LummaC2, Redline, and Rhadamanthys, which are known to exfiltrate sensitive information. The targeted services are primarily related to the eBay login portal, indicating a focus on credential harvesting. Given the high volume of data breaches and the active presence of infostealer malware targeting authentication mechanisms, this situation presents a critical risk. The primary concern is the potential for widespread account compromise, leading to financial fraud, identity theft, and further downstream attacks. Remediation efforts should focus on immediate credential reset campaigns for affected users, enhanced monitoring of login activity for suspicious patterns, and strengthening authentication controls, including multi-factor authentication deployment. Further investigation into the specific data compromised in the historical breaches and the active infostealer campaigns is also warranted.