mysql.com Domain Breach Exposure Report

The domain mysql.com has experienced a high volume of data breaches, totaling 5,432 events, and 678 infostealer logs over the past year. The majority of these events, 88.9%, are attributed to historical data breaches, with a significant portion originating from "Combolist sources" (93.5%) within leak repositories. Infostealer activity is primarily linked to malware families such as LummaC2 (17.7%) and Redline (17.4%). The timeline shows a notable spike in client-related events in September 2025 and March 2026, and employee-related events in January 2026, suggesting periods of heightened compromise. The affected operating systems are predominantly Windows 11 and Windows 10 variants. Given the high risk score of 90 and the prevalence of data breaches and infostealer activity, this exposure poses a significant risk to sensitive data. The focus for remediation should be on strengthening credential security, investigating the source of combolists and database dumps, and enhancing endpoint security to detect and prevent infostealer malware. Prioritizing the investigation of the January 2026 employee-related spike and the March 2026 client-related spike is crucial for understanding the immediate impact and potential for further compromise.