Credentials, devices and data found in dark web stealer logs & breaches
Last updated
· most recent exposure 0 days ago
66
Exposure level: High
maruti.co.in scores 66/100 on credential volume, active device compromise, how recent the exposure is, and how much of it is employee rather than customer data.
Higher exposure than 71% of the 1,761 domains we track
Findings summary
Generated from this report’s data · 10 September 2026
The domain maruti.co.in has substantial credential exposure on the dark web, with 3,781 leaked credentials and 544 compromised devices recovered to date. Exposure is accelerating: the last 90 days account for 45% more credentials than the preceding quarter, which points to active infections rather than a single historical breach. The most recent exposure was recorded in the last 24 hours.
Exposure is split across both sides: 1,587 employee credentials on the maruti.co.in domain, and 2,200 stolen customer logins for its services. Those accounts appear against Microsoft 365 among others — third-party services that sit outside the network boundary.
544 devices associated with maruti.co.in were infected with credential-stealing malware; the RedLine family account for the identified strains.
105,333 session cookies were recovered from those same machines, most commonly for youtube.com and google.com. A stolen session cookie lets an attacker resume an already-authenticated session without the password or a second factor, and stays usable until the session is invalidated server-side — a password reset alone does not revoke it. Those same devices gave up 110 application tokens.
Most recent exposure 0 days agoLast 90 days +45%26% reuse a top-10 password
Employee exposure
corporate accounts — @maruti.co.in
1,587
leaked credentials · 362 compromised devices
Top exposed employee accounts
yogesh.kumb***@maruti.co.in96
mittar.sha***@maruti.co.in78
298***@maruti.co.in67
pankaj.bharg***@maruti.co.in60
daffodil_akaspr***@maruti.co.in56
Where staff accounts were caught
login.microsoftonline.com256
idbroker.webex.com55
www.researchgate.net30
220.226.210.1623
maruti.app.param.ai21
Customer exposure
stolen logins for maruti.co.in
2,200
leaked credentials · 305 compromised devices
Top exposed customer accounts
f4s1260
maruti\272760240
false54
iocl49
29519148
Most targeted services
connect.corp.maruti.co.in814
webmail.maruti.co.in329
swift.maruti.co.in191
vpn.corp.maruti.co.in186
connect2.corp.maruti.co.in169
3,781
Exposed Credentials
544
Compromised Devices
0
Credit Cards
0
Crypto Wallets
110
Auth Tokens
105,333
Stolen Cookies
Exposure over time (credentials leaked per month)
What this means. Each bar counts credentials first seen in that month.
A rising tail points to active, ongoing infections rather than a single historical breach —
the two call for different responses.
2024-012026-09
Corporate SaaS & shadow-IT exposed (employee logins to third-party services)
What this means. Third-party services staff signed into using a
maruti.co.in address. Each one is an authentication path into company data that sits
outside the corporate perimeter, and outside most offboarding processes.
Microsoft 365262
Most common passwords 26% reuse a top-10 password
Ma***23198
We***23106
@m***2090
Sy***2360
/d***a/54
35***4337
@D***2130
@M***2130
Mo***3430
Yo***2330
Stolen sessions (active cookies that can bypass MFA)
What this means. A session cookie proves a login already happened,
so replaying a valid one can skip both the password and the second factor. Resetting the
password does not revoke it — the session has to be invalidated server-side.
youtube.com2,978
google.com2,113
bing.com1,053
adnxs.com1,012
google.co.in993
myntra.com888
Financial, crypto & app tokens
App / session tokens
Google103
Discord6
Telegram1
Browsers & apps affected
Microsoft Edge (Default)36
Google Chrome (Profile 4)24
Google Chrome (Profile 2)9
Google Chrome (Profile 18)4
Google Chrome (Default)2
Google Chrome (Profile 8)2
Stealer malware families seen
RedLine
Frequently asked about maruti.co.in
Has maruti.co.in been breached?
We have recovered 3,781 credentials associated with maruti.co.in from dark web stealer logs and breach collections, along with 544 compromised devices. That is not the same as a confirmed breach of maruti.co.in's own systems: most stealer-log credentials come from malware on individual users' devices rather than from a compromise of the company itself.
Is my maruti.co.in password leaked?
This report is aggregate and does not identify individuals. To check a specific address, run a free individual check from the ShadowMap home page — results are not stored.
How recent is this maruti.co.in data?
The most recent exposure for maruti.co.in was recorded 0 days ago. This report was compiled on 10 September 2026 and is refreshed periodically as new data arrives.
What should maruti.co.in do about this exposure?
Force a password reset on the exposed accounts, invalidate the 105,333 stolen session cookies — an active session survives a password change, and re-image the 544 compromised devices, which will otherwise keep leaking new credentials.
