ucla.edu Domain Breach Exposure Report

The telemetry indicates a significant exposure event for ucla.edu, with a risk score of 100. Over the reporting period, there were 160,140 historical data breaches and 5,990 infostealer events. The majority of these events, 96.4%, are attributed to historical data breaches, while 3.6% are active infostealer logs. The timeline shows a sharp increase in employee and client events starting in September 2025, with notable peaks in January and February 2026. Malware families like Acreed, Redline, and LummaC2 are prevalent, suggesting active compromise and data exfiltration attempts. Targeted services include core ucla.edu domains and authentication services like shibboleth-idp, indicating potential compromise of identity and access management infrastructure. The data also points to combolist sources and database dumps as significant leak repository classifications, suggesting credential stuffing and large-scale data leakage.