mayoclinic.org Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting mayoclinic.org, with a total of 33,573 recorded events over the period from July 2025 to June 2026. The majority of these events, 89.2%, are historical data breaches, while 10.8% are active infostealer logs. A notable surge in employee-related events occurred in January 2026, coinciding with a substantial increase in client-related events in March 2026. The data suggests that infostealer activity, particularly from malware families like Rhadamanthys, Redline, and LummaC2, is targeting credentials associated with account and signup services for mayoclinic.org. The primary source of leaked data appears to be combolist sources and database dumps, with a significant portion of the affected activity originating from the United States.