tandfonline.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event affecting tandfonline.com, with over 110,000 historical data breaches and over 13,000 active infostealer logs observed within the reporting period. The majority of these events are linked to "Combolist sources," suggesting credential stuffing or account takeover attempts. The timeline shows a notable increase in employee and client-related events starting in March 2026, with a peak in April 2026. Malware families like Redline, LummaC2, and Rhadamanthys are prevalent, indicating active credential harvesting and data exfiltration. The targeted services are primarily related to user registration and login functionalities on the tandfonline.com domain, suggesting these are the entry points or targets of the observed activity. The geographical breakdown shows a concentration of activity originating from India, Indonesia, and Egypt. Given the high volume of data breaches and active infostealer logs, coupled with the prevalence of credential-harvesting malware and the targeting of login services, this incident poses a critical risk. The exposure of over 110,000 records through historical data breaches and the ongoing threat from infostealers necessitate immediate attention. Remediation efforts should focus on securing user credentials, enhancing authentication mechanisms, and investigating the source of the "Combolist sources" and associated malware. Prioritizing the protection of client data and employee accounts is paramount.