ShadowMap

Dark Web Exposure for citibank.co.in

Credentials, devices and data found in dark web stealer logs & breaches
74
Exposure level: High
citibank.co.in scores 74/100 based on leaked credentials, compromised devices, and stolen financial & session data found on the dark web.
Most recent exposure 20 days ago Last 90 days -38% 3% reuse a top-10 password
Employee exposure
corporate accounts — @citibank.co.in
7
leaked credentials · 7 compromised devices
Top exposed employee accounts
//citibank.co.in/ibank/login/iqpin1.jsp vicky34752
citibank.co.in/ibank/login/citilogin.do?doffercode=payccbill2
citibank.co.in1
cko***@citibank.co.in1
citibank.co.in/ibank/login/iqpin1.jsp1
Where staff accounts were caught
https2
microsoftedgewelcome.microsoft.com2
1512941
Customer exposure
stolen logins for citibank.co.in
18,735
leaked credentials · 75 compromised devices
Top exposed customer accounts
gahan9136
rahulcr_0805125
rahul_78304118
mavajifushi55
ashly_1153
Most targeted services
www.citibank.co.in10,845
m.citibank.co.in4,030
mobile.citibank.co.in370
www.online.citibank.co.in109
online.citibank.co.in34
18,741
Exposed Credentials
80
Compromised Devices
0
Credit Cards
1
Crypto Wallets
42
Auth Tokens
69,758
Stolen Cookies

Exposure over time (credentials leaked per month)

2024-012026-05

Corporate SaaS & shadow-IT exposed (employee logins to third-party services)

Microsoft2

Most common passwords 3% reuse a top-10 password

@k***719
Th***0@9
20***738
36***088
65***ef8
89***868
Ch***568
Ma***@28
Oc***248
Ra***028

Stolen sessions (active cookies that can bypass MFA)

youtube.com2,325
google.com1,310
adnxs.com716
pubmatic.com704
rubiconproject.com620
google.co.in598

Financial, crypto & app tokens

Crypto wallets
metamask1
App / session tokens
Google40
Telegram2

Browsers & apps affected

Microsoft Edge (Default)14
Google Chrome (Default)8
Google Chrome [Profile 6]4
Microsoft Edge [Default]4
Google Chrome (Profile 1)2
Google Chrome (Profile 12)2

Stealer malware families seen

RedLine

Related companies

Explore

Check your own exposure →

Free dark web & attack-surface check by ShadowMap

Figures are aggregate counts derived from dark web stealer logs and public breach data. Data is indicative and updated periodically.