zalando.de Domain Breach Exposure Report

The telemetry indicates a significant exposure event impacting zalando.de, with a total of 263,591 recorded events between July 2025 and June 2026. The majority of these events, 71.2%, are historical data breaches, and 28.8% are active infostealer logs. A substantial number of client records (247,103) and employee records (16,488) are implicated. The primary malware families associated with these events are Redline, LummaC2, and Rhadamanthys, all known for credential theft. The data suggests a broad geographical reach, with Italy, Spain, and Germany being the most affected countries. The high volume of historical data breaches and active infostealer logs, coupled with the involvement of credential-stealing malware, presents a critical risk. The exposure of a large number of client and employee records necessitates immediate investigation and remediation. Priority should be placed on identifying the root cause of the data breaches and infostealer activity, enhancing credential security measures, and implementing robust data protection protocols to prevent further compromise.