united.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting united.com, with over 481,000 total events recorded between July 2025 and June 2026. The majority of these events, approximately 90%, are classified as historical data breaches, affecting nearly 433,000 records. Additionally, over 48,000 events are attributed to infostealer activity, representing about 10% of the total. The data suggests a substantial risk to both employees and clients, with clients being the most affected group, comprising over 398,000 of the total events. The timeline shows a sharp increase in employee-related events in January 2026 and a peak in client-related events in March 2026, coinciding with the highest observed infostealer and data breach figures. The high volume of historical data breaches and active infostealer logs, coupled with a risk score of 100, signifies a critical threat. The prevalence of infostealer malware families like Redline, Rhadamanthys, and LummaC2, which are known for credential harvesting, suggests a high likelihood of compromised user accounts and sensitive data exfiltration. Remediation efforts should focus on immediate incident response to contain ongoing infostealer activity, comprehensive data breach investigation, and enhanced security controls to prevent further unauthorized access and data loss, particularly concerning client data. The primary focus should be on securing client credentials and preventing further exploitation of vulnerabilities that led to these breaches.