Mass Credential Exposures Across Major Corporations

• •Over 747,485 credential exposure events identified across ten organizations.
• •Apple and OpenAI had significant discrepancies between employee and client credential exposures.
• •Infostealer malware was present in all analyzed organizations, highlighting ongoing risks.

Lunar Cyber reported 747,485 credential exposure events linked to ten large organizations, primarily in technology, finance, and retail. The analysis revealed that infostealer malware and breach databases were responsible for these exposures, with Apple showing over 46 million total events, but only 209,767 tied to employee accounts. OpenAI had 11.1 million total events, with just 531 linked to its domain. Employee-domain exposures were significant for companies like Owens Corning and Eversource, where over 93% and 53% of events were tied to their own domains, respectively. The report highlighted the importance of distinguishing between employee and client exposures, as the latter can still pose risks but differ in impact. Infostealer malware was identified across all organizations, with common families including LummaC2 and RedLine. The findings emphasize the ongoing risk of credential exposure even without a public breach.