ynet.co.il Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting ynet.co.il, with 6,203 historical data breaches and 759 active infostealer logs observed between July 2025 and June 2026. The majority of the exposure, 89.1%, stems from historical data breaches, while 10.9% is attributed to active infostealer activity. The data breaches primarily originate from "Combolist sources" (89.1%), suggesting compromised credential lists, and "Database dumps" (10.9%). Infostealer activity is linked to malware families such as Redline (13%), LummaC2 (12.1%), and Acreed (8.2%), which are known for exfiltrating credentials and sensitive information. The timeline shows a surge in employee and client-related events, particularly in September 2025 and March 2026, coinciding with increased infostealer activity. The primary targeted services are related to ynet.co.il's login and premium web portals, with a notable concentration in Israel. Given the high volume of historical data breaches and the presence of active infostealer campaigns targeting login and premium services, this event poses a critical risk. The exposure of employee and client data through credential stuffing and direct information theft could lead to account takeovers, financial fraud, and reputational damage. Remediation efforts should focus on immediate credential rotation for all affected users, enhanced monitoring for suspicious login activity on ynet.co.il services, and a thorough review of data security practices to prevent future credential compromise and data exfiltration.