labcorp.com Domain Breach Exposure Report

The telemetry indicates a significant exposure impacting Labcorp.com, with 153,535 total events recorded between July 2025 and June 2026. A substantial portion of these events, 129,940 (84.6%), are classified as historical data breaches, while 23,595 (15.4%) are active infostealer logs. The data suggests a high volume of compromised employee and client credentials, with 65,436 employee events and 88,099 client events. The primary malware families observed are Redline and Rhadamanthys, both infostealers, indicating a focus on credential harvesting. The most frequently targeted service is the patient portal, particularly the login and registration endpoints, suggesting an attempt to gain unauthorized access to patient accounts. The majority of the exposure originates from the United States, with significant data originating from combolist sources and database dumps.