ShadowMap

Dark Web Exposure for kostal.com

Credentials, devices and data found in dark web stealer logs & breaches
53
Exposure level: Elevated
kostal.com scores 53/100 based on leaked credentials, compromised devices, and stolen financial & session data found on the dark web.
Most recent exposure 19 days ago Last 90 days +88% 78% reuse a top-10 password
Employee exposure
corporate accounts — @kostal.com
308
leaked credentials · 125 compromised devices
Top exposed employee accounts
w.schm***@kostal.com143
ma.kr***@kostal.com58
a.vasconce***@kostal.com34
la.n***@kostal.com18
m.gjonche***@kostal.com10
Where staff accounts were caught
kostal.mitarbeiterangebote.de78
doodle.com47
kostal-u.kostal.int28
zoom.us27
mve.vivo.com.br10
Customer exposure
stolen logins for kostal.com
266
leaked credentials · 168 compromised devices
Top exposed customer accounts
gjonc00147
16prasann***@gmail.com40
boro_kot***@yahoo.com26
wissem.8tr***@gmail.com20
abderrakib***@gmail.com20
Most targeted services
jobs.kostal.com118
uk.kostal.com26
data-exchange.kostal.com25
b2b.kostal.com18
www.data-exchange.kostal.com14
564
Exposed Credentials
280
Compromised Devices
0
Credit Cards
0
Crypto Wallets
18
Auth Tokens
39,723
Stolen Cookies

Exposure over time (credentials leaked per month)

2024-012026-05

Corporate SaaS & shadow-IT exposed (employee logins to third-party services)

Zoom27
Atlassian2

Most common passwords 78% reuse a top-10 password

%S***65116
t8***Vv40
Sa***9#35
Ad***5226
%S***1824
pi***2322
4i***5F20
Ko***2311
Lk***2310
Ko***348

Stolen sessions (active cookies that can bypass MFA)

youtube.com1,656
google.com753
aliexpress.com382
www.udemy.com310
bing.com295
paypal.com285

Financial, crypto & app tokens

App / session tokens
Google18

Browsers & apps affected

Vivaldi [Default]7
Google Chrome (Default)4
Browser/Logins/Vivaldi_Default[9bf5d247].txt3
Chrome [Default]3

Stealer malware families seen

RedLine

Related companies

Explore

Check your own exposure →

Free dark web & attack-surface check by ShadowMap

Figures are aggregate counts derived from dark web stealer logs and public breach data. Data is indicative and updated periodically.