hp.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event affecting approximately 2.1 million employees and 2.6 million clients of hp.com between July 2025 and June 2026. The primary drivers of this exposure are historical data breaches, accounting for 80.9% of events, and active infostealer logs, representing 19.1%. Malware families such as LummaC2, Redline, and Rhadamanthys are prevalent, with targeted services primarily related to HP's login and authentication infrastructure. Given the high volume of data breaches and the involvement of infostealers targeting authentication services, this incident poses a critical risk. The prevalence of LummaC2 and Redline suggests potential credential harvesting and further lateral movement within affected environments. Prioritization should focus on immediate incident response, comprehensive forensic analysis of the identified data breaches and infostealer activity, and strengthening authentication mechanisms, particularly for services like login3.id.hp.com. Remediation efforts should include credential rotation for all affected employees and clients, enhanced endpoint detection and response, and a review of data access controls.