glassdoor.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting approximately 249,722 clients and 3,010 employees of glassdoor.com. The primary drivers of this exposure are historical data breaches, accounting for 86.7% of events, and active infostealer logs, representing 13.3%. Malware families such as LummaC2, Redline, and Rhadamanthys are prevalent. The data suggests a broad geographical reach, with the United States, India, and Pakistan being the most affected countries. The exposure period spans from July 2025 to June 2026, with a notable surge in client-related events in January 2026 and March 2026, coinciding with employee-related events in January 2026. The high-risk score of 100 necessitates immediate attention. The prevalence of infostealer logs and the sheer volume of client data involved suggest a high likelihood of credential compromise and potential financial or identity fraud. Remediation efforts should focus on enhancing endpoint security, particularly for Windows 11 and Windows 10 operating systems, implementing robust credential management practices, and conducting thorough investigations into the identified malware families and their associated command-and-control infrastructure. Prioritizing the investigation of the "Combolist sources" within leak repositories is crucial for understanding the root cause of the client data exposure.