static1.squarespace.com Domain Breach Exposure Report

The telemetry indicates a significant exposure related to data breaches and infostealer activity over the past year, affecting 100 employees and 244 clients. The majority of events, 78.5%, are historical data breaches, while 21.5% are active infostealer logs. Malware families like Redline and LummaC2 were observed. The exposure primarily targets Squarespace services, with a notable increase in employee-related events in early 2026. The high volume of historical data breaches, predominantly from "Combolist sources," suggests a risk of credential stuffing attacks and unauthorized access. The presence of active infostealer logs, coupled with malware like Redline, indicates ongoing compromise and potential exfiltration of sensitive information. Remediation should focus on strengthening authentication mechanisms, monitoring for credential stuffing attempts, and enhancing endpoint security to detect and remove infostealer malware. The primary affected sector appears to be Technology & SaaS due to the nature of the targeted service.