google.com.co Domain Breach Exposure Report

The domain google.com.co is associated with a high-risk score of 77, primarily driven by a significant volume of historical data breaches (969 events) and active infostealer logs (161 events) over the past year. The data breaches are predominantly linked to "Combolist sources," suggesting compromised credentials. Infostealer activity is led by "Redline" malware, with other notable families including "LummaC2" and "Vidar." The telemetry indicates a focus on "google.com.co" and its subdomains, with a notable concentration of activity originating from Colombia and the United States. The timeline shows a sharp increase in both employee and client-related events starting in March 2026, coinciding with a surge in data breach and infostealer activity. This exposure poses a critical risk due to the high number of data breaches and active infostealer campaigns targeting credentials associated with google.com.co. The prevalence of "Combolist sources" in leak repositories indicates a high likelihood of credential stuffing attacks against employees and clients. The observed malware families, particularly Redline, are known for their ability to exfiltrate sensitive information. Prioritization should focus on immediate credential reset campaigns for all users associated with google.com.co, enhanced monitoring for suspicious login activity, and a review of access controls. Given the nature of the targeted domain and the observed data breach types, the most relevant industry sector is Technology & SaaS.