ing-diba.de Domain Breach Exposure Report

The telemetry indicates a significant exposure impacting both employees and clients of ing-diba.de, with a high volume of historical data breaches and active infostealer logs observed over the period of July 2025 to June 2026. The majority of events are attributed to data breaches, affecting 7579 instances, while infostealer activity accounts for 845 instances. A notable surge in employee-related events occurred in January 2026, and client-related events peaked in March 2026. The primary malware families identified are Rhadamanthys, LummaC2, and Redline, all known for credential harvesting and data exfiltration. The exposure is heavily concentrated in Germany, with a substantial portion of the data originating from "Combolist sources" and "Database dumps" within leak repositories. Given the high risk score of 96 and the prevalence of infostealer malware targeting banking services, this situation warrants immediate attention. The focus should be on identifying compromised employee and client credentials, assessing the extent of data exfiltration, and reinforcing security measures for banking platforms. Prioritizing remediation efforts on preventing further credential compromise and mitigating the impact of existing data breaches is crucial. The observed malware families suggest a strong focus on stealing sensitive financial information and login credentials.