microsoftstore.com Domain Breach Exposure Report

The telemetry indicates a significant exposure related to the microsoftstore.com domain, with 235 historical data breaches and 41 active infostealer logs observed over the period from July 2025 to June 2026. The majority of these events, 85.1%, are attributed to historical data breaches, while 14.9% are active infostealer logs. A total of 268 client-related events and 8 employee-related events were recorded. The most prevalent malware families associated with these events are Rhadamanthys (29.3%), Redline (9.8%), and LummaC2 (2.4%). The data suggests that 99.1% of the observed leaks originate from combolist sources, with database dumps accounting for the remaining 0.9%. The risk priority for microsoftstore.com is elevated due to the high volume of historical data breaches and ongoing infostealer activity, impacting a large number of clients. The prevalence of infostealer malware, particularly Rhadamanthys and Redline, suggests a risk of credential harvesting and further compromise. Remediation efforts should focus on comprehensive credential hygiene, including mandatory password resets for both employees and clients, enhanced monitoring for suspicious login activity, and a thorough review of data access controls. Investigating the root cause of the historical data breaches and the sources of the combolists is also critical to prevent future occurrences.