google.it Domain Breach Exposure Report

The telemetry indicates a significant exposure event affecting google.it, with a total of 6,349 events recorded between July 2025 and June 2026. The majority of these events, 5,919, are classified as historical data breaches, while 430 are active infostealer logs. The exposure primarily impacts clients (4,087) and employees (2,262). Malware families such as LummaC2, Redline, and Rhadamanthys are prominently featured, suggesting a sophisticated threat actor. The data originates largely from "Combolist sources" (86.8%) and "Database dumps" (13.2%), with a notable concentration of affected operating systems being Windows 11 and Windows 10 variants. Given the high volume of data breaches and the presence of active infostealer logs, this incident poses a critical risk. The focus for remediation should be on immediate credential hygiene, including widespread password resets and multi-factor authentication enforcement for both employees and clients. Investigating the source of the "Combolist sources" and "Database dumps" is crucial to understand the initial compromise vector and prevent recurrence. Prioritizing the removal of identified malware families from affected systems is also essential.