Fortune 500 Credentials Leaked at Alarming Rate

• •Nearly 10 million Fortune 500 employee credentials leaked on the dark web.
• •99% of stolen credentials were taken from web browsers via infostealer malware.
• •Companies must assess their exposure and monitor the dark web for leaks.

A report from Nordlayer reveals that nearly 10 million employee credentials from Fortune 500 companies are available on the dark web, with a credential leaked every 100 seconds. The majority of these credentials, 99%, were stolen from web browsers through infostealer malware that targets saved logins. The report indicates that 6.6 million corporate email addresses are currently circulating, heightening the risk for organizations. Threat actors exploit these credentials to gain unauthorized access to corporate networks, often leading to ransomware attacks. Companies are urged to assess their exposure and implement measures to monitor the dark web for credential leaks and properly offboard employees. The findings highlight a significant vulnerability, particularly among midsize technology firms, where the risk is notably higher.