Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Discovered 2026-10-12 04:39 UTC
Est. attack date 2026-10-10
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

confluent.io Revenue $1.16 Billion Confluent is the enterprise data streaming platform built on Apache Kafka that lets companies process live events like payments, orders and sensor data in real time, and it is now owned by IBM which bought it for about $11 billion in March 2026. It ended 2025 with 6,690 customers including roughly 40% of the Fortune 500 and grew revenue 21% with its cloud segment alone growing 27%. Customers include BMW, L'Oreal, Michelin and Ticketmaster and the platform runs across 60+ cloud regions on AWS, Azure and Google Cloud. Money comes from cloud usage and software subscriptions, about 96% of revenue, paid for compute and data transfer rather than per-seat fees. Around 3,241 employees worked at Confluent across 27 countries before the IBM deal and it owns no factories or stores because its product is pure software and cloud. Confluent was still unprofitable with a $295 million loss in 2025 though it earned positive operating income excluding stock pay.

Infostealer activity detected by HudsonRock

Compromised Employees: 1

Compromised Users: 1018

Third Party Employee Credentials: 5


External Attack Surface: 56


Infostealer Distribution

Exposure Report
by ParanoidLab
4396
Passwords
16 critical
8772
Cookies
0 critical
Last queried 2026-10-12 04:39 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • mx0b-001b2d07.pphosted.com. Proofpoint
  • mx0a-001b2d07.pphosted.com. Proofpoint
TXT Records
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all
  • anthropic-domain-verification-qch0mw=4tbOiKurwAHVEc5vgE8NbHgvz
  • jamf-site-verification=tyJ4Iu00q3-d6uU8WEA-SQ
  • atlassian-domain-verification=RYbrbNvZZiy8tEI6SkKA7Ducjaa+qwp9WgkGBdRzQn9IeTOybDhNFyQvtrwWfw0k
  • axios-domain-verification-qvrskq=nJzeUbYIAgdgVrcJ3BGqT7dTr
  • cursor-domain-verification-75848x=zGkjWswrCVS40KL6dpTuVLnvM
  • google-site-verification=VcG8AkpcymCNyR30JAV393TvOlaDtnBVYYW4ZyBTcPo
  • google-site-verification=FEXoUB6Viju2F2zxqVThSUiVAoxVTqCfGF8lGQ0Ae38
  • onetrust-domain-verification=c0f02f6f0953472cabcc7ce480a42753
  • openai-domain-verification=dv-SWqHfUHK28SMhEw0eGcoMgDl
  • ciscocidomainverification=2de6df61c76a0d63eb1704cf94c77297b39e79f4574d64ddc0638f4c7ee378c5
  • atlassian-domain-verification=LzP5jOSYnNxTn4LTE+nn2L1qYqX9taG/eyoM2THqN63KZm6FjHVtUnTaX9DgtQSC
  • docusign=4b0c5cb7-2f4f-418d-b7a2-4660408db96a
  • docker-verification=05d44a2b-b281-4a05-9cf8-631794ede4f8
  • google-site-verification=MRTGl2e6eyU0HdYRflY5ZSjAY1iskcASrkK91j9_ve0
  • google-site-verification=PSnXUy2mdtqmdEW6JOWpZ_WLZA9zfmm8Ghbx-q9HyQE
  • facebook-domain-verification=id6xxal3241300npue3c074vuyeck4
  • new-relic-domain-verification=b9d3890949914ab0820c958da2676244
  • google-site-verification=PaLT7Lbz1V530MiS66ubCK60pJ8TByrQZDLblbewqEU
  • _proofpoint-verification=6b8b37b2-b552-4c2d-8bcf-e0d69d315dcc
  • MS=ms82810105
  • google-site-verification=PX38mKLHtuUes0vx1gUTJ500L3muDVeZolSKHdNH4Jo
  • drift-domain-verification=f5fea677d92c8c94fba95f93693a9c6f2bc89f86d4d6071974c04d83e328ca38
  • k06b0fpxhbpy694g4pklbxnt9cc43wsz
  • status-page-domain-verification=24yy7pszm543
  • ibmid=9cd8da62-ce6d-46ed-8950-74437746a40d
  • atlassian-domain-verification=OKQlmVz0zCEfvJ5du22kM/aQOh5B5d6Hjtw8iRatmuj7Y7yFKovwf4c0x5V12tft
  • segment-site-verification=PWDs4CgFfs9nopNsjsavsGSxFmrWIHMu
  • google-site-verification=UDKkbA-cjcVAzaacQBONuo_7F1fnpr8g9deQaY75x54
  • apple-domain-verification=xwfXxxXTiOFCwrcA
Cloud / SaaS Services Detected
Anthropic Apple Atlassian Docker DocuSign JamF Microsoft 365 OneTrust OpenIA Proofpoint Segment

Leak Screenshot:

Leak Screenshot