eogresources.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event affecting EOG Resources, with 7,811 total events observed over the reporting period. The vast majority of these events, 7,699, are classified as historical data breaches, representing 98.6% of the total. Additionally, 112 events are identified as active infostealer logs, accounting for 1.4% of the total. The timeline shows a substantial spike in employee-related events in January 2026, with 5,343 occurrences, and a notable increase in client-related events in September 2025 (127) and March 2026 (67). Malware families associated with these events include LummaC2, Vidar, Redline, and Rhadamanthys, suggesting a sophisticated threat actor. Geographically, the majority of the observed activity originates from India (43 events), Trinidad & Tobago (20 events), and the United States (4 events). The presence of "Combolist sources" and "Database dumps" within leak repository classifications further supports the data breach narrative. Given the high volume of historical data breaches and the presence of active infostealer logs, this situation presents a critical risk to EOG Resources. The concentration of employee-related events in January 2026 warrants immediate investigation to understand the root cause and potential impact. Remediation efforts should focus on strengthening data security controls, enhancing incident response capabilities, and conducting thorough forensic analysis of the identified breaches and infostealer activity. Prioritizing the review of targeted services, particularly those related to careers and developer tokens (e.g., git.eogresources.com), is crucial to identify and mitigate any ongoing compromise or exploitation.