metlife.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting metlife.com, with 422,111 historical data breaches and 20,063 active infostealer logs detected over the reporting period. The majority of these events, 72.2%, originated from database dumps, with the remaining 27.8% attributed to combolist sources. Malware families such as Redline, Rhadamanthys, and LummaC2 were prevalent, accounting for over 40% of identified malware. The exposure primarily affected employees and clients, with a notable surge in both categories during May 2026. The targeted services include login and registration portals, suggesting potential credential compromise. Geographically, the United States is the most affected country, followed by Chile and Bangladesh. The high volume of data breaches and infostealer activity, coupled with the use of common credential-harvesting malware, presents a critical risk. The concentration of events in database dumps and combolists indicates a high likelihood of compromised credentials being available on the dark web. Remediation efforts should focus on immediate credential rotation for all affected employees and clients, enhanced monitoring of authentication systems, and a thorough review of database security practices to prevent future data exfiltration.