qualtrics.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting qualtrics.com, with 118,057 total events recorded between July 2025 and June 2026. The majority of these events, 98,618, are classified as historical data breaches, with an additional 19,439 events identified as active infostealer logs. The data suggests a substantial risk to both employees (6,252 events) and clients (111,805 events), with a notable surge in employee-related events in January 2026. The primary malware families associated with these events include LummaC2, Redline, and Rhadamanthys, often targeting login services. Given the high volume of data breaches and infostealer activity, this situation presents a critical risk. The prevalence of LummaC2 and Redline suggests a focus on credential harvesting, potentially leading to account takeovers and further data exfiltration. Remediation efforts should prioritize securing login endpoints, investigating the root cause of the historical data breaches, and enhancing endpoint detection and response capabilities to counter infostealer malware. The data also indicates a significant portion of the exposure originates from "Combolist sources" within leak repositories, suggesting compromised credentials are a primary vector.