kotaku.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting kotaku.com, with 916 historical data breaches and 174 active infostealer logs observed over the period from July 2025 to June 2026. The majority of these events, 84%, are attributed to historical data breaches, while the remaining 16% are active infostealer logs. The most prevalent malware families associated with these infostealer logs are Acreed (29.3%), Redline (12.1%), and Rhadamanthys (6.9%). The data suggests a high volume of client exposure (950) alongside employee exposure (140), with a notable concentration of activity in the United States (78 events). The primary sources of leaked data appear to be combolist sources (92.2%). Given the high volume of historical data breaches and the presence of active infostealer logs, the risk priority is high. The focus for remediation should be on immediate incident response to contain active infostealer threats, followed by a comprehensive review of historical breach data to understand the full scope of compromised credentials and PII. Implementing robust credential stuffing defenses and enhancing monitoring for infostealer activity targeting employee and client accounts are critical next steps. The prevalence of combolist sources suggests a need to strengthen authentication mechanisms and user education regarding phishing and credential reuse.