kijiji.ca Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting kijiji.ca, with over 467,000 historical data breaches and over 55,000 active infostealer logs detected within the reporting period. The majority of these events are linked to "Combolist sources," suggesting compromised credentials. The timeline shows a notable surge in employee-related events in February 2026, with nearly 1,800 incidents, and a consistent high volume of client-related events throughout the period, peaking in March 2026 with over 147,000. Malware families like LummaC2, Redline, and Rhadamanthys are prevalent, indicating active credential harvesting and data exfiltration attempts. The targeted services are primarily related to kijiji.ca login and user registration pages, and the geographical breakdown shows a concentration of activity originating from Canada, India, and the United States. Given the high volume of data breaches and infostealer activity, coupled with the targeting of login and registration services, this exposure poses a critical risk to both client and employee account security. The prevalence of infostealer malware suggests that attackers are actively attempting to harvest credentials, which could lead to account takeovers and further downstream impacts. Prioritization should focus on immediate remediation of compromised credentials, enhanced monitoring of login and registration endpoints, and a review of security controls to prevent future credential stuffing and infostealer attacks. The primary focus should be on securing client and employee data and preventing unauthorized access.