ShadowMap

Dark Web Exposure for redbus.in

Credentials, devices and data found in dark web stealer logs & breaches
66
Exposure level: High
redbus.in scores 66/100 based on leaked credentials, compromised devices, and stolen financial & session data found on the dark web.
Most recent exposure 20 days ago Last 90 days +1% 10% reuse a top-10 password
Employee exposure
corporate accounts — @redbus.in
116
leaked credentials · 68 compromised devices
Top exposed employee accounts
vincen***@redbus.in35
ansardee***@redbus.in14
arjun.me***@redbus.in13
redbus***@redbus.in9
//redbus.in/account p.ddivy***@gmail.com6
Where staff accounts were caught
www.amazon.com35
www.leanplum.com10
capitool.redbus.com8
https6
leanplum.com4
Customer exposure
stolen logins for redbus.in
17,077
leaked credentials · 956 compromised devices
Top exposed customer accounts
leenasrim264
pravin241
m.arunji***@gmail.com72
t.mora***@gmail.com55
deena.s.***@gmail.com52
Most targeted services
www.redbus.in9,555
m.redbus.in2,966
plus.redbus.in65
platform.redbus.in27
cc.redbus.in16
17,181
Exposed Credentials
966
Compromised Devices
0
Credit Cards
0
Crypto Wallets
254
Auth Tokens
371,101
Stolen Cookies

Exposure over time (credentials leaked per month)

2024-012026-05

Corporate SaaS & shadow-IT exposed (employee logins to third-party services)

Amazon/AWS35
Google Workspace3

Most common passwords 10% reuse a top-10 password

P@***rd105
sg***0989
Va***8@78
he***1578
pa***0278
pr***3.67
Da***2364
hi***8864
Ra***0163
Lo***2356

Stolen sessions (active cookies that can bypass MFA)

youtube.com12,319
google.com6,270
adnxs.com4,880
bing.com4,486
criteo.com4,140
pubmatic.com4,006

Financial, crypto & app tokens

App / session tokens
Google235
Discord13
Telegram6

Browsers & apps affected

Microsoft Edge (Default)38
Google Chrome (Default)30
Chrome [Default]18
Edge [Default]14
Browser/Logins/Chrome_Profile 5[851ada7e].txt7
Google Chrome (Profile 3)3

Stealer malware families seen

RedLine

Related companies

Explore

Check your own exposure →

Free dark web & attack-surface check by ShadowMap

Figures are aggregate counts derived from dark web stealer logs and public breach data. Data is indicative and updated periodically.