lowes.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting lowes.com, with a total of 420,004 recorded events over the period. The majority of these events, 376,813 (89.7%), are classified as historical data breaches, while 43,191 (10.3%) are active infostealer logs. The data suggests a substantial number of employee (145,736) and client (274,268) credentials may be compromised. The timeline shows a notable surge in employee-related events in January 2026, with 105,997 instances, and a peak in client-related events in March 2026, with 72,145 instances. Malware families such as Redline, Rhadamanthys, and LummaC2 are prevalent, often associated with infostealer activity. The primary leak repository sources are combolist sources (71.3%) and database dumps (28.7%). The high volume of historical data breaches and active infostealer logs, coupled with the large number of affected employee and client credentials, elevates the risk to a critical level. The prevalence of infostealer malware suggests ongoing credential harvesting. Remediation efforts should focus on immediate credential rotation for all identified employee and client accounts, enhanced monitoring for suspicious login activity, and a thorough review of data access controls. Given the nature of the exposed data and the domain, the closest industry sector is Retail & E-commerce.