sherwin-williams.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event for sherwin-williams.com, with 76,631 total events observed over the reporting period. The majority of these events, 71,674 (93.5%), are classified as historical data breaches, while 4,957 (6.5%) are active infostealer logs. The data breach events suggest a large-scale compromise of sensitive information, potentially impacting a substantial number of employees (49,018) and clients (27,613). The infostealer logs, primarily attributed to malware families like Redline (43.3%) and Rhadamanthys (9.1%), indicate ongoing attempts to exfiltrate credentials and other sensitive data, with a notable concentration of activity in January 2026. The primary services targeted include the main domain and registration pages, suggesting an attack vector aimed at user accounts and potentially customer data.