Back

intel.com Domain Breach Exposure Report

Risk Score

High Risk

Massive event volume or critical assets compromised.

AI Findings Summary

Critical

The telemetry indicates a significant exposure event affecting intel.com, with over 1.2 million total events recorded between July 2025 and June 2026. The majority of these events, approximately 90%, are historical data breaches, while 9.6% are active infostealer logs. The data breaches impact over 1 million client accounts and 200,000 employee accounts, with a notable surge in client-related events in March 2026. Infostealer activity, primarily involving Redline, LummaC2, and Rhadamanthys malware families, also shows a substantial presence. The targeted services include registration and login portals for software offerings, suggesting potential credential harvesting or account takeover attempts. The primary affected geographies are the United States, India, and Brazil. The leak repository classification indicates a high volume of combolist sources and database dumps, further corroborating the data breach and infostealer findings.

Total Events

1,201,657
credential exposure events

Employee Affected Events

207,948
account email domain = intel.com

Client Affected Events

993,709
service target = intel.com

Free Community Account

Stop stolen credentials from logging in

Own this domain? Create a free Lunar account to see full exposure data and evidence.

12-Month Events Timeline

Event volume by breach date, employee VS client

EmployeesClients
300,000200,000100,0000
peak month 273,180
Jul 25Sep 25Nov 25Jan 26Mar 26May 26Jun 26

Infostealers VS Data Breaches

Live stealer logs VS data breaches

Infostealer logs
Events115,086
Share10%
Data breaches
Events1,086,571
Share90%
Infostealer logs (10%)
115,086events
Data breaches (90%)
1,086,571events

207,948 compromised employee accounts pose an infrastructure risk, while 993,709 leaked client credentials create regulatory liability.

Antivirus Distribution

Security Tools on Infected Endpoints

Windows Defender1,186
Avast18
Malwarebytes18
Kaspersky17
Windows Defender.17
Windows Defender ESET Security12
Windows Defender Norton Security Ultra11
Windows Defender [ON]10
Trend Micro8

Malware Families Distribution

Distribution of Active Stealer Strains

Redline22,551
LummaC217,765
Rhadamanthys13,978
Vidar8,334
Acreed7,627
StealC2,156
RisePro1,611
Millenium862
Remus840

Top Login URLs

Top exposed services found in the event results

  1. 1https://softwareoffer.intel.com/Identity/Account/Register91,096
  2. 2softwareoffer.intel.com/Identity/Account/Register65,309
  3. 3softwareoffer.intel.com50,742
  4. 4https://softwareoffer.intel.com49,000
  5. 5https://consumer.intel.com/intelcorpb2c.onmicrosoft.com/B2C_1A_UnifiedLogin_SISU_CML_SAML/api/SelfAsserted/confirmed40,156
  6. 6intel.com36,673
  7. 7softwareoffer.intel.com/identity/account/register25,477
  8. 8https://intel.com21,985
  9. 9https://www.intel.com21,877
  10. 10https://softwareoffer.intel.com/identity/account/register18,507

Infostealer By Geography

Shows the distribution of Infostealer-related credential exposure events across different geographic regions. The location is determined by analyzing the metadata of the infected machines associated with each event.

United States
Events7,454
India
Events6,016
Brazil
Events3,947
Mexico
Events2,414
Egypt
Events2,355
Spain
Events1,959
France
Events1,810
Thailand
Events1,795

Country Breakdown

  1. 1United States7,454
  2. 2India6,016
  3. 3Brazil3,947
  4. 4Mexico2,414
  5. 5Egypt2,355
  6. 6Spain1,959
  7. 7France1,810
  8. 8Thailand1,795

Services Classification Distribution

Blast radius - closer to core = more critical infrastructure, size = credential volume

Microsoft1,693
Cisco (AnyConnect)423
GitLab290
Git211
Pulse Secure82
WordPress64
Citrix59

Operating System Distribution

Distribution of compromised endpoint builds

Windows 10 Enterprise x649,954
Windows 118,860
Windows 11 24H2 build 26100 (64 Bit)5,704
Windows 10 Home x644,712
Windows 10 22H2 build 19045 (64 Bit)4,198

Leak Repository Classification

Where the exposed records currently reside

0
Named breaches
952,419
Combolist pools
134,152
Unattributed dumps

Disclaimer: This report includes AI-generated content. AI can make mistakes, so verify important findings independently before taking action.