nationwide.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting Nationwide.com, with over 152,000 total events recorded between July 2025 and June 2026. A substantial portion of these events, approximately 92.6%, are attributed to historical data breaches, while 7.4% are linked to active infostealer logs. The timeline shows a notable surge in employee and client-related events in January 2026, suggesting a potential peak in compromise activity during that period. Malware analysis reveals Redline and Rhadamanthys as prevalent infostealer families, often associated with credential harvesting. The data also points to widespread use of Windows 11 and Windows 10 operating systems among affected entities, with "Combolist sources" and "Database dumps" being the primary leak repository classifications, indicating credential stuffing and data exfiltration risks. The high volume of historical data breaches and active infostealer logs, coupled with the targeting of login services for nationwide.com, presents a critical risk of account compromise and further data exfiltration. The prevalence of infostealers like Redline and Rhadamanthys suggests that attackers are actively seeking to steal user credentials, which could lead to unauthorized access to sensitive client and employee information. Prioritization should focus on immediate remediation of identified vulnerabilities, enhanced monitoring of login activity, and user education regarding phishing and credential security, especially given the concentration of events in January 2026.