gehealthcare.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting gehealthcare.com, with 23,961 total events observed between July 2025 and June 2026. The majority of these events, 22,578 (94.2%), are classified as historical data breaches, while 1,383 (5.8%) are active infostealer logs. A notable spike in employee-related events occurred in January 2026, with 17,644 instances, alongside 308 client-related events in the same month. The data breaches are primarily sourced from "Database dumps" (81.8%) and "Combolist sources" (18.2%). The primary malware families associated with infostealer activity include Rhadamanthys (16.7%), LummaC2 (14.3%), and Redline (10.8%). The targeted services include login portals such as "https://logon.gehealthcare.com/idp/login" and career pages. Geographically, India and the United States show the highest number of affected entities. Given the high volume of data breaches and active infostealer logs, this situation warrants immediate attention to investigate the root cause of the breaches and the extent of compromised employee and client data, with a focus on securing authentication mechanisms and remediating infostealer infections.