pnc.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event affecting pnc.com, with a total of 383,847 recorded events between July 2025 and June 2026. The majority of these events, 88.4%, are classified as historical data breaches, totaling 339,277 instances. Additionally, 44,570 events (11.6%) are identified as active infostealer logs. The data suggests a substantial impact on both employees (109,249) and clients (274,598), with a notable surge in client-related events observed in March 2026. The primary sources of these leaks appear to be combolist sources (79.7%) and database dumps (20.3%). Malware families such as Redline, Rhadamanthys, and LummaC2 are frequently associated with these events. Given the high volume of historical data breaches and active infostealer logs, coupled with the large number of affected employees and clients, this situation presents a critical risk. The prevalence of infostealer malware targeting credentials and the origin of leaks from combolists and database dumps suggest a high likelihood of credential compromise and potential account takeovers. Prioritization should focus on immediate incident response, comprehensive forensic analysis to understand the scope and root cause of the breaches, and aggressive remediation efforts including credential rotation for all affected parties and enhanced monitoring for fraudulent activity.