ing.nl Domain Breach Exposure Report

The domain ing.nl has experienced a significant number of historical data breaches, affecting over 150,000 clients and 3,000 employees. Additionally, there are over 20,000 active infostealer logs, indicating ongoing compromise of credentials. The majority of these events are linked to "Combolist sources" within leak repositories, suggesting credential stuffing attacks or the use of previously compromised credentials. The timeline shows a surge in client-related events in late 2025 and early 2026, with a notable spike in employee-related events in January 2026. Given the high volume of historical data breaches and active infostealer logs, this exposure presents a critical risk. The primary focus for remediation should be on immediate credential rotation for all affected employees and clients, enhanced monitoring for suspicious login activity, and a thorough review of access controls. The prevalence of LummaC2, Redline, and Rhadamanthys malware families in the observed infostealer logs suggests a need to strengthen endpoint security and threat detection capabilities against these specific threats.