n-tv.de Domain Breach Exposure Report

The telemetry indicates a significant exposure of 570 historical data breaches and 72 active infostealer logs affecting the domain n-tv.de between July 2025 and June 2026. The data breaches represent 88.8% of the total events, with infostealer logs accounting for 11.2%. Employee and client accounts were impacted, with notable spikes in employee exposure in January 2026 (85) and March 2026 (86), and client exposure in September 2025 (38) and April 2026 (77). Malware families identified include Redline (16.7%) and LummaC2 (5.6%). The primary sources of leaked data appear to be combolist sources (72.1%) and database dumps (27.9%). The high volume of historical data breaches and active infostealer logs, coupled with the targeting of login and logon services on n-tv.de, suggests a high risk of credential stuffing attacks and further account compromise. The prevalence of Windows operating systems, particularly Windows 11, among affected systems, and the geographical distribution showing a significant presence in the United States, warrant immediate attention. Prioritization should focus on credential hygiene, multi-factor authentication enforcement, and enhanced monitoring for suspicious login activity originating from the identified malware families and geographical regions.