ShadowMap

Dark Web Exposure for hdbfs.com

Credentials, devices and data found in dark web stealer logs & breaches
70
Exposure level: High
hdbfs.com scores 70/100 based on leaked credentials, compromised devices, and stolen financial & session data found on the dark web.
Most recent exposure 20 days ago Last 90 days +72% 24% reuse a top-10 password
Employee exposure
corporate accounts — @hdbfs.com
235
leaked credentials · 130 compromised devices
Top exposed employee accounts
cdlops.kharg***@hdbfs.com70
39***@hdbfs.com18
pradeep.***@hdbfs.com14
devendra.g***@hdbfs.com13
jalpaiguri.cd***@hdbfs.com11
Where staff accounts were caught
accounts.firefox.com70
webmail.hdbfs.com48
geniebazaar.com24
com.exegesis.prudent_plus12
payzapp.biz.hdfcbank.com12
Customer exposure
stolen logins for hdbfs.com
6,264
leaked credentials · 820 compromised devices
Top exposed customer accounts
chf20987981
chf02559272
11184366
hdb199557
a6039354
Most targeted services
synergy.hdbfs.com2,270
hric.hdbfs.com1,167
adselfservice.hdbfs.com517
usm.hdbfs.com497
copsweb.hdbfs.com458
6,445
Exposed Credentials
824
Compromised Devices
0
Credit Cards
2
Crypto Wallets
156
Auth Tokens
243,550
Stolen Cookies

Exposure over time (credentials leaked per month)

2024-012026-05

Most common passwords 24% reuse a top-10 password

HD***FS261
Hd***33117
29***92105
Ba***3480
06***9474
ba***2365
15***0161
99***8958
In***4555
In***3453

Stolen sessions (active cookies that can bypass MFA)

youtube.com8,402
google.com5,628
google.co.in2,968
adnxs.com2,617
bing.com2,308
pubmatic.com2,293

Financial, crypto & app tokens

Crypto wallets
metamask2
App / session tokens
Google143
Discord9
Telegram4

Browsers & apps affected

Google Chrome (Default)53
Google Chrome (Profile 1)26
Google Chrome (Profile 6)18
Microsoft Edge (Default)18
Browser/Logins/Chrome_Profile 5[bd4aca8].txt14
Google Chrome [Profile 5]14

Stealer malware families seen

RedLine

Related companies

Explore

Check your own exposure →

Free dark web & attack-surface check by ShadowMap

Figures are aggregate counts derived from dark web stealer logs and public breach data. Data is indicative and updated periodically.