prudential.com Domain Breach Exposure Report

The telemetry indicates a significant exposure of Prudential's digital assets, with over 149,000 events logged between July 2025 and June 2026. A substantial portion of these events, 91.4%, are classified as historical data breaches, while 8.6% are active infostealer logs. The data breaches affected approximately 136,843 entities, and infostealers targeted 12,877, with employee and client data being the primary targets. The timeline shows a surge in employee and client-related events in September 2025 and January 2026, suggesting periods of heightened compromise. Malware families such as Redline, Rhadamanthys, and LummaC2 are prevalent, indicating a focus on credential theft and data exfiltration. Given the high volume of historical data breaches and active infostealer activity, this exposure presents a critical risk to Prudential. The prevalence of infostealers targeting employee and client credentials necessitates immediate attention to credential hygiene, access control, and endpoint security. Remediation efforts should focus on identifying the root causes of the historical data breaches, strengthening defenses against current infostealer campaigns, and implementing robust monitoring for further compromise. The targeted services include critical login portals and the main prudential.com domain, underscoring the direct impact on user access and brand integrity.