exxonmobil.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting ExxonMobil, with 69,410 historical data breaches and 1,576 active infostealer logs observed over the reporting period. The majority of events, 97.8%, are attributed to historical data breaches, while 2.2% are active infostealer logs. Employee data appears to be the primary target, accounting for 64,827 events, followed by client data with 6,159 events. Malware families such as LummaC2, Rhadamanthys, and Redline are prevalent, suggesting a sophisticated threat actor. The data also shows targeted services including exxonmobil.com, its job portals, and various mobile applications, alongside a geographical distribution primarily in Canada, New Zealand, and Singapore. The presence of "Combolist sources" and "Database dumps" in leak repositories further indicates credential stuffing and data exfiltration as key attack vectors.