loews.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting loews.com, with 35,447 historical data breaches and 1,738 active infostealer logs detected between July 2025 and June 2026. The majority of these events are linked to "Combolist sources" and the "Redline" malware family, suggesting widespread credential compromise. Employee accounts are the most affected, with 36,795 instances, followed by 390 client accounts. The timeline shows a surge in employee-related events in September 2025 and March 2026, with a notable increase in data breaches and infostealer activity throughout the period. Given the high volume of historical data breaches and active infostealer logs, this situation poses a critical risk. The prevalence of Redline malware and the targeting of employee credentials indicate a high likelihood of ongoing account takeover and potential financial fraud. Prioritization should focus on immediate credential reset for all affected employees, enhanced monitoring for suspicious login activity, and a thorough review of security configurations for services like Citrix, Pulse Secure, and Cisco AnyConnect, which appear to be targeted.