taylormorrison.com Domain Breach Exposure Report

The domain taylormorrison.com has experienced a significant number of data breaches, totaling 4667 events, which constitute 99.8% of all recorded events. Additionally, there are 10 active infostealer logs, representing 0.2% of events. The timeline indicates a surge in employee and client-related events starting in September 2025 and peaking in January 2026, with a consistent presence of employee-related events throughout the observed period. Malware families associated with these events include LummaC2 (80%), Rhadamanthys (10%), and Redline (10%), primarily targeting Windows 11 Home operating systems. The data breaches appear to originate from database dumps (91.5%) and combolist sources (8.5%). This exposure presents a high-risk scenario due to the sheer volume of historical data breaches, suggesting a widespread compromise of sensitive information. The presence of active infostealer logs and specific malware families like LummaC2 indicates ongoing threats that could lead to further credential theft and data exfiltration. Prioritization should focus on immediate remediation of the identified data breach vectors, particularly database dump vulnerabilities, and strengthening defenses against infostealer malware. A thorough investigation into the root cause of the data breaches and the scope of compromised employee and client data is critical.