ft.com Domain Breach Exposure Report

The domain ft.com exhibits a critical risk score of 100, driven by a significant volume of historical data breaches (49,798 events) and active infostealer logs (6,825 events) over the period of July 2025 to June 2026. The data breaches constitute 87.9% of all observed events, with a notable surge in client-related incidents in March 2026. Infostealer activity, accounting for 12.1% of events, primarily targets credentials for services like ft.com login pages and is associated with malware families such as LummaC2, Acreed, and Redline, indicating potential credential harvesting and unauthorized access. The high volume of data breaches, particularly those affecting clients, alongside active infostealer campaigns targeting authentication services, presents a severe risk of sensitive information exposure and account compromise. The prevalence of combolist sources in leak repositories suggests a focus on credential stuffing attacks. Remediation efforts should prioritize strengthening authentication mechanisms, enhancing monitoring for credential stuffing attempts, and investigating the root cause of the historical data breaches to prevent recurrence. The primary focus should be on protecting client data and credentials.