ShadowMap

Dark Web Exposure for mastercard.com

Credentials, devices and data found in dark web stealer logs & breaches
76
Exposure level: High
mastercard.com scores 76/100 based on leaked credentials, compromised devices, and stolen financial & session data found on the dark web.
Most recent exposure 19 days ago Last 90 days +20% 5% reuse a top-10 password
Employee exposure
corporate accounts — @mastercard.com
862
leaked credentials · 276 compromised devices
Top exposed employee accounts
james_for***@mastercard.com75
sridhar.ganapa***@mastercard.com66
sean.kil***@mastercard.com63
krishnakant.sha***@mastercard.com61
christine.og***@mastercard.com55
Where staff accounts were caught
login.microsoftonline.com157
my.vmware.com46
mctestpassword.corp.mastercard.org43
reg.rainfocus.com37
iam.virginpulse.com36
Customer exposure
stolen logins for mastercard.com
28,896
leaked credentials · 1,150 compromised devices
Top exposed customer accounts
administrator89
admin36
msolisg20620
merchant18
m.solisg18
Most targeted services
airport.mastercard.com6,577
sa.cardholder.mastercard.com5,133
developer.mastercard.com2,709
sorpresas.mastercard.com2,294
travelprepaid.mastercard.com1,411
29,745
Exposed Credentials
1,162
Compromised Devices
0
Credit Cards
47
Crypto Wallets
460
Auth Tokens
729,178
Stolen Cookies

Exposure over time (credentials leaked per month)

2024-012026-05

Corporate SaaS & shadow-IT exposed (employee logins to third-party services)

Microsoft 365157
Adobe26
Slack24
Cisco20
Oracle12

Most common passwords 5% reuse a top-10 password

Ha***ya123
Ro***33110
Jl***08108
wi***27101
ki***9197
Ko***@A85
ez***2584
Be***2379
Ro***8479
jo***1279

Stolen sessions (active cookies that can bypass MFA)

youtube.com19,922
google.com11,309
adnxs.com8,087
pubmatic.com7,947
bing.com7,895
criteo.com5,770

Compromised despite antivirus (AV installed on infected devices)

Windows Defender74
Avast Antivirus6
Kaspersky3
Panda Dome2
AVG Antivirus1
Reason Cybersecurity1

Financial, crypto & app tokens

Crypto wallets
metamask45
phantom2
App / session tokens
Google424
Discord34
Telegram2

Where devices were compromised (by country)

Mexico [MX]21
Argentina [AR]9
Venezuela [VE]8
Colombia [CO]6
Guatemala [GT]6
Top cities
Caracas6
Guatemala City4
La Paz4
Lima4
Puebla City3

Browsers & apps affected

Chrome [Default]30
Google Chrome (Default)22
Browser/Logins/Chrome_Default[842af612].txt20
Browser/Logins/Edge_Default[7dbfbaee].txt20
Browser/Logins/Chrome_Profile 3[d883f347].txt19
Edge [Default]19

Stealer malware families seen

RedLine

Related companies

Explore

Check your own exposure →

Free dark web & attack-surface check by ShadowMap

Figures are aggregate counts derived from dark web stealer logs and public breach data. Data is indicative and updated periodically.