getpocket.com Domain Breach Exposure Report

The telemetry indicates a significant exposure related to getpocket.com, with 173,627 total events observed between July 2025 and June 2026. The majority of these events, 149,899, are classified as historical data breaches, with an additional 23,728 events identified as active infostealer logs. These infostealer logs are primarily associated with malware families such as LummaC2, Redline, and Rhadamanthys, and are targeting services like https://getpocket.com and its login pages. The data breaches appear to originate from "Combolist sources," suggesting compromised credential reuse. This exposure presents a high-risk scenario, primarily affecting clients (173,420) and to a lesser extent employees (207). The prevalence of historical data breaches and active infostealer activity targeting login endpoints necessitates immediate attention to credential hygiene and account security. Remediation efforts should focus on strengthening authentication mechanisms, monitoring for credential stuffing attacks, and educating users about phishing and malware risks. Given the nature of the service, the closest industry sector is Technology & SaaS.