orbitz.com Domain Breach Exposure Report

The telemetry indicates a significant exposure impacting orbitz.com, with a total of 72,239 events recorded between July 2025 and June 2026. The majority of these events, 89.7%, are historical data breaches, and 10.3% are active infostealer logs. A substantial number of client accounts (69,183) and employee accounts (3,056) were affected. The timeline shows a notable surge in client-related events in September 2025 and January 2026, with employee account compromises also peaking in January 2026. The primary sources of these breaches appear to be combolist sources, accounting for 96.1% of leak repository classifications, suggesting credential stuffing attacks. Malware families associated with these events include LummaC2, Redline, and Rhadamanthys, all known for credential harvesting. Given the high volume of data breaches and active infostealer logs, coupled with the compromise of both client and employee accounts, this exposure presents a critical risk. The reliance on combolists indicates a vulnerability to credential stuffing, likely stemming from reused passwords. Remediation efforts should focus on enforcing strong, unique password policies, implementing multi-factor authentication across all accounts, and actively monitoring for and revoking compromised credentials. The prevalence of infostealer malware targeting credential theft necessitates enhanced endpoint security and user education on phishing and malware threats.