patreon.com Domain Breach Exposure Report

The telemetry indicates a significant exposure impacting over 2.2 million clients and 893 employees of patreon.com between July 2025 and June 2026. The primary concern stems from nearly 2 million historical data breaches and over 274,000 active infostealer logs, with "Combolist sources" accounting for 99.9% of leak repository classifications. Malware families like Rhadamanthys, LummaC2, and Redline are prevalent, targeting login and signup pages on patreon.com. The majority of affected users are located in the United States, Brazil, and India. The high volume of data breaches and active infostealer activity, coupled with the targeting of authentication endpoints, presents a critical risk of account compromise and further data exfiltration. Given the scale of the client and employee data exposure, the focus should be on immediate credential reset campaigns for all affected users and employees. Implementing enhanced multi-factor authentication, monitoring for anomalous login activity, and conducting thorough security audits of authentication systems are critical remediation steps. The prevalence of infostealer malware necessitates user education on phishing and malware threats, alongside endpoint security enhancements.