lastminute.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event for lastminute.com, with a total of 32,367 recorded events over the period from July 2025 to June 2026. The majority of these events, 82.5%, are classified as historical data breaches, totaling 26,705 incidents. Additionally, 17.5% of events, or 5,662 incidents, are identified as active infostealer logs. The data suggests a widespread compromise affecting a large number of clients (30,788) and a smaller number of employees (1,579). Malware families such as LummaC2, Acreed, Redline, and Rhadamanthys were prevalent, indicating potential credential harvesting and system compromise. The targeted services include login and signup endpoints for both secure and authentication domains, suggesting an attempt to gain unauthorized access to user accounts. The exposure is heavily concentrated in European countries, with France, Italy, Spain, and the United Kingdom showing the highest numbers of affected entities. The leak repository classification indicates that 96.5% of the data originated from combolist sources, suggesting compromised credentials were used in these events.