truecaller.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting the domain truecaller.com between July 2025 and June 2026. A total of 22,987 events were observed, with 18,541 classified as historical data breaches and 4,446 as active infostealer logs. The majority of these events, 80.7%, are historical data breaches, and 19.3% are active infostealer logs. The timeline shows a notable increase in client-related events during March 2026, with 5,572 occurrences, and employee-related events peaking in January 2026 with 114 occurrences. Malware families associated with these events include LummaC2 (17.5%), Redline (10.8%), and Rhadamanthys (8.8%). The data breaches appear to originate from combolist sources (99%). This high-risk score of 91 suggests a critical exposure. The prevalence of infostealer logs and historical data breaches, particularly those originating from combolist sources, indicates a high likelihood of credential compromise and potential account takeovers affecting both clients and employees. Remediation efforts should focus on strengthening authentication mechanisms, enhancing endpoint security to detect and mitigate infostealer activity, and conducting thorough investigations into the identified data breaches to understand the scope of compromised information and affected individuals. Prioritizing the investigation of LummaC2 and Redline malware families is crucial given their high prevalence.