fortune.com Domain Breach Exposure Report

The telemetry indicates a significant exposure of 2,133 events over the past year, with a high concentration of 1,585 historical data breaches and 548 active infostealer logs. The majority of these events, 74.3%, are attributed to historical data breaches, while 25.7% are active infostealer logs. The timeline shows a notable increase in client-related events from September 2025 onwards, peaking in April 2026, alongside fluctuating employee-related events. Malware families such as LummaC2, Redline, and Vidar are prevalent, suggesting active credential harvesting and data exfiltration attempts. The exposure is geographically concentrated in Indonesia, India, and Kenya, with a substantial portion of the data originating from "Combolist sources" (74.2%) and "Database dumps" (25.8%). The high risk score of 89, driven by the volume of data breaches and active infostealer activity, necessitates immediate attention. The prevalence of infostealer malware targeting various services, including mobile applications and the main domain, indicates a direct threat to user credentials and sensitive information. Remediation efforts should focus on enhancing data security measures, investigating the source of the historical data breaches, and implementing robust defenses against infostealer malware, particularly for users in the identified high-risk geographies.