ShadowMap

Dark Web Exposure for ibm.com

Credentials, devices and data found in dark web stealer logs & breaches
86
Exposure level: Critical
ibm.com scores 86/100 based on leaked credentials, compromised devices, and stolen financial & session data found on the dark web.
Most recent exposure 20 days ago Last 90 days +24% 1% reuse a top-10 password
Employee exposure
corporate accounts — @ibm.com
38,225
leaked credentials · 979 compromised devices
Top exposed employee accounts
arnab.debn***@ibm.com716
jorge.humbero.mont***@ibm.com397
juan.carlos.castro.p***@ibm.com298
jesus.ardi***@ibm.com134
j.vic***@ibm.com130
Where staff accounts were caught
login.w3.ibm.com3,408
w3id.sso.ibm.com2,275
localhost820
w3idprofile.sso.ibm.com652
test.schoolpapers.in444
Customer exposure
stolen logins for ibm.com
648,666
leaked credentials · 4,412 compromised devices
Top exposed customer accounts
srajk***@in.ibm.com94
srinidhir***@gmail.com45
vigneshrao***@gmail.com44
ac19ucs***@smartinternz.com44
atif.jil***@nu.edu.pk40
Most targeted services
www.ibm.com195,039
cloud.ibm.com149,440
login.ibm.com73,937
idaas.iam.ibm.com45,901
w3id.sso.ibm.com7,064
673,845
Exposed Credentials
4,449
Compromised Devices
0
Credit Cards
180
Crypto Wallets
7,469
Auth Tokens
13,447,542
Stolen Cookies

Exposure over time (credentials leaked per month)

2024-012026-05

Corporate SaaS & shadow-IT exposed (employee logins to third-party services)

Microsoft 365505
Amazon/AWS414
Salesforce212
Box110

Most common passwords 1% reuse a top-10 password

****1,338
G1***#9520
06***17446
av***12411
Ho***37298
De***d.275
06***17263
Ca***23259
av***12239
06***16217

Stolen sessions (active cookies that can bypass MFA)

youtube.com451,509
google.com257,695
bing.com147,608
pubmatic.com144,036
adnxs.com138,818
criteo.com114,857

Compromised despite antivirus (AV installed on infected devices)

Windows Defender302
McAfee24
Avast Antivirus15
AVG Antivirus9
ESET Security7
360 Total Security6

Financial, crypto & app tokens

Crypto wallets
metamask107
phantom31
okx24
exodus6
coinbase4
trust4
App / session tokens
Google6,630
Discord645
Telegram194

Where devices were compromised (by country)

Colombia [CO]70
Mexico [MX]69
Peru [PE]53
Argentina [AR]27
Chile [CL]20
Top cities
Lima32
Bogotá8
Buenos Aires8
Medellín8
Centro Municipality6

Browsers & apps affected

Microsoft Edge (Default)1,437
Google Chrome (Default)838
Edge [Default]388
Chrome [Default]291
Google Chrome (Profile 1)213
Google Chrome (Profile 4)134

Stealer malware families seen

RedLine RisePro

Related companies

Explore

Check your own exposure →

Free dark web & attack-surface check by ShadowMap

Figures are aggregate counts derived from dark web stealer logs and public breach data. Data is indicative and updated periodically.