Back

rakuten-card.co.jp Domain Breach Exposure Report

Risk Score

High Risk

Massive event volume or critical assets compromised.

AI Findings Summary

Critical

The telemetry indicates a significant exposure impacting 69,827 clients and 102 employees of rakuten-card.co.jp between July 2025 and June 2026. This exposure is primarily characterized by historical data breaches (89.3%) and active infostealer logs (10.7%). The data breaches appear to originate from combolist sources, while infostealer activity is linked to malware families such as Rhadamanthys, Redline, and LummaC2, with a notable concentration of activity in Japan. The risk score of 97 highlights the critical nature of this event, suggesting a high likelihood of compromised credentials and sensitive information.

Total Events

69,929
credential exposure events

Employee Affected Events

102
account email domain = rakuten-card.co.jp

Client Affected Events

69,827
service target = rakuten-card.co.jp

Free Community Account

Stop stolen credentials from logging in

Own this domain? Create a free Lunar account to see full exposure data and evidence.

12-Month Events Timeline

Event volume by breach date, employee VS client

EmployeesClients
20,00013,3336,6670
peak month 19,062
Jul 25Sep 25Nov 25Jan 26Mar 26May 26Jun 26

Infostealers VS Data Breaches

Live stealer logs VS data breaches

Infostealer logs
Events7,496
Share11%
Data breaches
Events62,433
Share89%
Infostealer logs (11%)
7,496events
Data breaches (89%)
62,433events

102 compromised employee accounts pose an infrastructure risk, while 69,827 leaked client credentials create regulatory liability.

Antivirus Distribution

Security Tools on Infected Endpoints

Windows Defender311
Windows Defender ウイルスバスター クラウド52
Windows Defender.14
Windows Defender Deep Instinct Endpoint Protection9
Windows Defender マカフィー ウイルススキャン8
Windows Defender マカフィー セキュリティエージェント3
Windows Defender Sophos Intercept X3
Windows Defender マカフィー3
Windows Defender ESET Security3

Malware Families Distribution

Distribution of Active Stealer Strains

Rhadamanthys1,855
Redline929
LummaC2783
Vidar370
Acreed361
Raccoon106
Remus77
Millenium65
StealC61

Top Login URLs

Top exposed services found in the event results

  1. 1rakuten-card.co.jp7,577
  2. 2https://rakuten-card.co.jp5,518
  3. 3https://www.rakuten-card.co.jp/e-navi/index.xhtml4,728
  4. 4https://www.rakuten-card.co.jp4,668
  5. 5rakuten-card.co.jp/e-navi/index.xhtml4,148
  6. 6https://www.rakuten-card.co.jp/3,657
  7. 7www.rakuten-card.co.jp3,189
  8. 8https://www.rakuten-card.co.jp/e-navi/2,955
  9. 9rakuten-card.co.jp/2,754
  10. 10https://www.rakuten-card.co.jp/e-navi/sd/index.xhtml2,236

Infostealer By Geography

Shows the distribution of Infostealer-related credential exposure events across different geographic regions. The location is determined by analyzing the metadata of the infected machines associated with each event.

Japan
Events4,555
United States
Events42
Vietnam
Events38
Taiwan
Events23
Brazil
Events16
Venezuela
Events16
South Korea
Events14
Thailand
Events10

Country Breakdown

  1. 1Japan4,555
  2. 2United States42
  3. 3Vietnam38
  4. 4Taiwan23
  5. 5Brazil16
  6. 6Venezuela16
  7. 7South Korea14
  8. 8Thailand10

Services Classification Distribution

Blast radius - closer to core = more critical infrastructure, size = credential volume

-
Total

Operating System Distribution

Distribution of compromised endpoint builds

Windows 10 22H2 build 19045 (64 Bit)1,434
Windows 11550
Windows 11 24H2 build 26100 (64 Bit)374
Windows 10 Enterprise x64305
Windows 10 Home x64214

Leak Repository Classification

Where the exposed records currently reside

0
Named breaches
62,420
Combolist pools
13
Unattributed dumps

Disclaimer: This report includes AI-generated content. AI can make mistakes, so verify important findings independently before taking action.