espncricinfo.com Domain Breach Exposure Report

The domain espncricinfo.com experienced a significant exposure event between July 2025 and June 2026, with 4,695 total events recorded. The majority of these events, 89.9%, were historical data breaches, while 10.1% were active infostealer logs. A substantial number of client accounts, 4,632, were affected by these breaches, alongside 63 employee accounts. The timeline shows a notable increase in client-related events from March 2026 onwards, coinciding with a rise in employee account compromises. The primary malware families observed were LummaC2, Redline, and Vidar, indicating a focus on credential harvesting. The data suggests that these breaches originated from combolist sources, impacting users primarily in India, Pakistan, and the United States. The high volume of data breaches and active infostealer logs, coupled with the compromise of both client and employee accounts, presents a critical risk. The prevalence of infostealer malware targeting credentials, particularly LummaC2 and Redline, suggests a strong potential for further account takeovers and downstream impacts. Prioritization should focus on immediate remediation of identified vulnerabilities, enhanced credential hygiene for both employees and clients, and a thorough investigation into the root cause of the data breaches originating from combolist sources. The observed targeting of specific services like "submit.espncricinfo.com" for login and user registration warrants focused security hardening.