lonelyplanet.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting lonelyplanet.com, with a high risk score of 93. The primary concern stems from 4,391 historical data breaches and 813 active infostealer logs, affecting a total of 854 employees and 4,350 clients. The data breaches appear to be largely sourced from "Combolist sources" (83.9%) and "Database dumps" (16.1%). Malware activity is notable, with LummaC2 (18.8%), Redline (15.9%), and Rhadamanthys (10.8%) being the most prevalent families. Targeted services include authentication endpoints like auth.lonelyplanet.com and secure.lonelyplanet.com. The majority of affected operating systems are Windows 11 and Windows 10 variants. Geographically, India, the United States, and Pakistan show the highest incidence of affected entities. Given the high volume of data breaches and active infostealer logs, this event poses a critical risk to the organization and its users. The prevalence of credential stuffing-related data breaches suggests a high likelihood of account compromise for both employees and clients. Remediation efforts should focus on immediate credential resets for all affected users, enhanced monitoring of authentication services, and a thorough review of data security practices, particularly concerning the origin and handling of data that may have contributed to the "Combolist sources" and "Database dumps".