northerntrust.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event affecting Northern Trust, with 14,516 historical data breaches and 72 active infostealer logs observed. The majority of these events, 99.5%, are historical data breaches, while 0.5% are active infostealer logs. A notable spike in employee-related events occurred in January 2026, with 13,451 incidents, suggesting a potential large-scale compromise or data leak impacting employees. Client-related events also saw an increase in September 2025 and June 2026. The high volume of historical data breaches and the presence of active infostealer logs, including prevalent malware families like Rhadamanthys and Redline, elevate the risk to a critical level. The telemetry points to database dumps as the primary source of leaked data, accounting for 97.2% of observed leaks. The focus for remediation should be on investigating the root cause of the historical data breaches, enhancing security measures to prevent further infostealer activity, and securing database integrity. Given the nature of the data and the domain, the closest industry sector is Banking & Finance.