foxnews.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting foxnews.com, with a total of 35,607 recorded events over the period from July 2025 to June 2026. The majority of these events, 84.2%, are classified as historical data breaches, totaling 29,966 incidents. Additionally, 15.8% of events, or 5,641 incidents, are identified as active infostealer logs. The data suggests a substantial risk to both employees and clients, with 6,589 employee-related events and 29,018 client-related events observed. The timeline shows a notable surge in employee-related events in January 2026, with 3,710 incidents, and a significant increase in client-related events in March 2026, with 6,626 incidents. The primary sources of leaked data appear to be combolist sources (81.4%) and database dumps (18.6%). Malware families such as Rhadamanthys, LummaC2, and Redline are prominently featured, indicating a sophisticated threat landscape. The targeted services include various subdomains of foxnews.com, particularly those related to user accounts and subscriptions, such as my.foxnews.com and nation.foxnews.com. Given the high volume of data breaches and active infostealer logs, coupled with the targeting of user account services, this exposure presents a critical risk. The prevalence of combolist sources suggests credential stuffing attacks, while infostealer logs indicate potential compromise of user credentials and sensitive information. Remediation efforts should focus on immediate credential reset campaigns for both employees and clients, enhanced monitoring for suspicious login activity, and a thorough review of data access controls and security configurations for the affected services. Prioritizing the investigation into the root cause of the data breaches and infostealer activity is crucial to prevent further compromise.