oshkoshcorp.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event affecting oshkoshcorp.com, with 3,188 historical data breaches and 85 active infostealer logs observed between July 2025 and June 2026. The majority of these events, 90.9%, are linked to database dumps, with a substantial portion of the remaining 9.1% attributed to combolist sources. Malware analysis reveals a prevalence of infostealer families such as RisePro (20%), Redline (7.1%), StealC (1.2%), and Vidar (1.2%). The timeline shows a sharp increase in employee-related events in January 2026, with 2,384 incidents, and a consistent number of client-related events throughout the period, totaling 324. Targeted services include guest-americas.oshkoshcorp.com and portal.oshkoshcorp.com, with Pulse Secure identified as a classified service. The primary operating system affected is Windows 10 (61.2%). Given the high volume of historical data breaches and active infostealer logs, coupled with the presence of common infostealer malware families, this incident poses a critical risk of further credential compromise and potential data exfiltration. The concentration of events in database dumps and combolists suggests a high likelihood of compromised credentials being traded or sold on illicit markets. Prioritization should focus on immediate credential hygiene, including widespread password resets for both employees and clients, enhanced monitoring for anomalous access patterns, and a thorough review of data access controls for services like guest-americas.oshkoshcorp.com and portal.oshkoshcorp.com. The prevalence of Windows 10 suggests that endpoint security and patching on these systems should be a key remediation focus.