hsbc.co.uk Domain Breach Exposure Report

The telemetry indicates a significant exposure of client and employee data, with 34,905 client records and 455 employee records compromised over the reporting period. This is primarily driven by 31,222 historical data breaches and 4,138 active infostealer logs, suggesting a high volume of credential stuffing and data exfiltration activities. The most prevalent malware families are Redline, LummaC2, and Rhadamanthys, commonly associated with credential theft. The targeted services include various HSBC security portals and the mobile banking application, indicating a direct assault on customer-facing and internal security infrastructure. The majority of the compromised data originates from combolist sources, highlighting the impact of large-scale credential stuffing attacks against the organization's user base.