usda.gov Domain Breach Exposure Report

The domain usda.gov experienced a significant number of events, with 78,080 historical data breaches and 3,739 active infostealer logs observed between July 2025 and June 2026. The data breaches represent 95.4% of all events, while infostealer activity accounts for 4.6%. Employee and client data were impacted, with notable spikes in employee-related events in January 2026 and client-related events in September 2025 and March 2026. The most frequently observed malware families were LummaC2, Rhadamanthys, and Redline, all known for credential theft. Given the high volume of data breaches and the prevalence of infostealer malware targeting employee and client data, this exposure presents a critical risk. The primary focus for remediation should be on strengthening data security controls to prevent future breaches and mitigating the impact of ongoing infostealer threats. Prioritizing the security of authentication services like eauth.usda.gov and supertracker.usda.gov is essential, as these were frequently targeted.