news.com.au Domain Breach Exposure Report

The telemetry indicates a significant exposure event affecting news.com.au, with a high volume of historical data breaches (12,803) and active infostealer logs (710) observed over the period of July 2025 to June 2026. The data breaches represent 94.7% of the total events, suggesting a large-scale compromise of historical records. Infostealer activity, accounting for 5.3% of events, points to ongoing attempts to exfiltrate sensitive information. The timeline shows a notable surge in employee and client-related events in September 2025 and March 2026, potentially indicating periods of heightened attack activity or data leakage. Malware families such as Rhadamanthys and Redline are prominently featured in the infostealer logs, alongside targeted services like news.com.au and its associated account and subscription portals, and a concentration of affected operating systems on Windows 11 and Windows 10 variants. The high risk score of 100, coupled with the sheer volume of historical data breaches and ongoing infostealer activity, necessitates immediate attention. The primary focus should be on investigating the root cause of the historical data breaches to understand the extent of compromised data and to implement robust data protection measures. Concurrently, efforts should be directed towards mitigating the infostealer threat by enhancing endpoint security, monitoring for suspicious network activity, and reinforcing authentication mechanisms for critical services like account management and subscriptions. The prevalence of Windows operating systems in the telemetry suggests that endpoint security hardening and vulnerability management on these platforms should be a priority.