gumtree.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting gumtree.com, with 94,349 historical data breaches and 21,793 active infostealer logs observed over the reporting period. The majority of these events are linked to "Combolist sources," suggesting compromised credentials. The timeline shows a notable increase in employee-related events in January 2026, with 233 instances, alongside a substantial number of client-related events throughout the period, peaking in March 2026 with 27,658. Malware families such as LummaC2, Redline, and Rhadamanthys are prevalent, indicating active credential harvesting and data exfiltration activities targeting services like the gumtree.com login portal and account creation pages. Given the high volume of data breaches and infostealer activity, coupled with the targeting of authentication services, this exposure poses a critical risk. The prevalence of LummaC2 and Redline malware, known for stealing credentials and sensitive information, further elevates the threat. Prioritization should focus on immediate credential reset campaigns for both employees and clients, enhanced monitoring of authentication endpoints, and a thorough investigation into the root cause of the data breaches and infostealer infections to prevent further compromise. The primary affected sector is Retail & E-commerce.