finalfantasyxiv.com Domain Breach Exposure Report

The domain finalfantasyxiv.com has experienced a significant number of data breaches, totaling 738 events, which constitute 80.9% of all observed events. Additionally, there were 174 infostealer events, representing 19.1% of the total. The majority of these events occurred between March 2026 and June 2026, with a notable increase in employee-related events during March and April 2026. The primary source of these breaches appears to be combolist sources, indicating credential stuffing or reuse attacks. Malware families associated with these events include Rhadamanthys and Redline, both common infostealers. The high volume of historical data breaches and active infostealer logs, particularly targeting the secure login services of finalfantasyxiv.com, presents a critical risk. The prevalence of Windows 11 operating systems among affected systems suggests a broad user base. Prioritization should focus on immediate credential hygiene, multi-factor authentication enforcement, and enhanced monitoring for suspicious login activity across all services, especially the secure login portal. Geographically, the United States shows the highest concentration of affected users.