moneysavingexpert.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting moneysavingexpert.com, with over 38,000 total events recorded between July 2025 and June 2026. The majority of these events are attributed to historical data breaches (81.6%) and active infostealer logs (18.4%). Notably, 31,806 data breach events and 7,152 infostealer events were observed, affecting a substantial number of clients (38,854) and a smaller number of employees (104). The timeline shows a peak in client-related events in March 2026, with a consistent presence of employee-related events throughout the period, suggesting ongoing compromise or data leakage. The high risk score of 92, coupled with the prevalence of infostealer malware families like LummaC2, Acreed, and Rhadamanthys, points to a critical security posture. The data breaches are largely sourced from "Combolist sources," indicating credential stuffing or leaked credential usage. The targeted services include login and registration pages for forums and clubs, suggesting that user credentials may have been compromised and are being actively exploited. Remediation should focus on immediate credential reset for all affected employees and clients, enhanced monitoring for suspicious login activity, and a thorough review of authentication and data protection mechanisms, particularly for the "clubs" and "forums" sections of the website.