yumchina.com Domain Breach Exposure Report

The domain yumchina.com has experienced a significant number of data breach events, totaling 350 over the observed period, with an additional 28 active infostealer logs. The majority of these events, 247, impacted employees and 131 affected clients. Malware analysis indicates a prevalence of LummaC2, Rhadamanthys, and Redline infostealers, suggesting a focus on credential harvesting. The data breach evidence points to "Database dumps" and "Combolist sources" as primary leak repositories, indicating potential exposure of large datasets. Targeted services include mail servers (OWA) and various internal portals, suggesting an attempt to gain access to sensitive corporate communications and systems. The timeline shows a surge in employee-related events in January 2026, coinciding with a broad increase in client-related events in the latter half of the period. Given the high volume of data breaches and the presence of active infostealer logs targeting employee and client credentials, this exposure presents a critical risk. The reliance on common infostealer families and the nature of the leaked data (database dumps, combolists) indicate a high likelihood of widespread credential compromise and potential follow-on attacks. Prioritization should focus on immediate incident response to contain further compromise, thorough investigation of the data breach origins, and comprehensive credential reset for all affected employees and clients, alongside enhanced monitoring of targeted services.