mastercard.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting mastercard.com, with 100,195 historical data breaches and 20,485 active infostealer logs observed between July 2025 and June 2026. The data breaches represent 83% of the total events, while infostealer logs account for 17%. A notable surge in employee-related events occurred in January 2026, with 28,014 instances, alongside 6,453 client-related events in the same month. The primary malware families associated with these events are LummaC2 (18.8%), Redline (14.2%), and Rhadamanthys (11%), all of which are infostealers. The data originates from various countries, with Brazil showing the highest incidence at 6,379 events. The high volume of historical data breaches and active infostealer logs, coupled with the prevalence of known infostealer malware families, elevates the risk to both employees and clients. The concentration of events in January 2026, particularly the spike in employee-related incidents, suggests a potential targeted campaign or a significant compromise during that period. Remediation efforts should focus on enhancing data security measures, improving threat detection capabilities for infostealer malware, and conducting thorough investigations into the January 2026 event to understand the root cause and prevent recurrence. Prioritizing the security of client data and employee credentials is paramount given the nature of the observed threats.