intuitive.com Domain Breach Exposure Report

The telemetry indicates a significant exposure of client data, with 1070 historical data breaches and 270 active infostealer logs observed over the reporting period. The majority of these events, 79.9%, are attributed to historical data breaches, while the remaining 20.1% are active infostealer logs. The data suggests a broad impact, affecting 1028 clients and 312 employees. Malware families such as Rhadamanthys and LummaC2 are present, indicating potential ongoing credential harvesting and data exfiltration activities. The targeted services are primarily login portals, including "login.intuitive.com/login" and "https://login.intuitive.com/login", suggesting these are key points of compromise. The exposure is geographically distributed, with notable activity originating from Brazil, the United Kingdom, and India. Given the high volume of historical data breaches and the presence of active infostealer logs targeting client and employee credentials, this exposure presents a critical risk. The prevalence of combolist sources (71.6%) within leak repositories suggests that compromised credentials from other breaches are being leveraged against intuitive.com. Remediation efforts should focus on immediate credential rotation for all affected employees and clients, enhanced monitoring of login activity for anomalous patterns, and a thorough review of authentication and authorization mechanisms for the targeted login services. Further investigation into the root cause of the historical data breaches is also recommended.