iheart.com Domain Breach Exposure Report

The telemetry indicates a significant exposure of client data, with 93,463 client records compromised, primarily through historical data breaches (84,905) and active infostealer logs (9,200). A notable surge in employee data exposure occurred in January 2026, with 541 employee records affected. The primary source of these breaches appears to be combolist sources, accounting for 99.3% of the identified leak repository classifications. Malware families such as LummaC2, Redline, and Rhadamanthys are prevalent, suggesting active credential harvesting and data exfiltration activities targeting the "iheart.com" domain and its associated services. The high volume of client data breaches and the presence of active infostealer logs, combined with the prevalence of common infostealer malware families, elevate the risk to "iheart.com". The exposure of employee data, particularly the spike in January 2026, warrants immediate attention. Remediation efforts should focus on strengthening credential security, enhancing endpoint detection and response to combat infostealer malware, and investigating the source of the combolist compromises to prevent further data leakage.