pg.com Domain Breach Exposure Report

The telemetry indicates a significant historical data breach event affecting approximately 154,167 records, alongside 14,193 active infostealer logs. The primary impact appears to be on employees, with 118,023 affected, followed by clients at 50,337. Malware families such as Vidar, Redline, and LummaC2 are prevalent, suggesting a focus on credential harvesting. The timeline shows a surge in employee and client-related events in September 2025 and January 2026, correlating with periods of increased infostealer activity. The data also points to targeted services including the pg.com domain and various Android applications, with a notable concentration of events originating from the United Arab Emirates and Türkiye. Given the high volume of historical data breaches and active infostealer logs, this exposure presents a critical risk. The prevalence of infostealer malware targeting employee and client credentials necessitates immediate attention to credential hygiene, multi-factor authentication enforcement, and endpoint security. Remediation should focus on identifying the root cause of the historical data breaches, enhancing monitoring for ongoing infostealer activity, and securing targeted services and applications, particularly those identified in the United Arab Emirates and Türkiye.