Dark Web Exposure for salesforce.com

Credentials, devices and data found in dark web stealer logs & breaches

100

Exposure level: Critical

salesforce.com scores 100/100 based on leaked credentials, compromised devices, and stolen financial & session data found on the dark web.

Most recent exposure 20 days ago Last 90 days +20% 1% reuse a top-10 password

Employee exposure

corporate accounts — @salesforce.com

18,112

leaked credentials · 849 compromised devices

Top exposed employee accounts

vignesh.vi***@salesforce.com94

dillipnayak***@salesforce.com88

madhusr***@salesforce.com77

esandu***@salesforce.com69

tabbatha.z***@salesforce.com54

Where staff accounts were caught

steamcommunity.com364

https359

eu.battle.net342

accounts.spotify.com330

Customer exposure

stolen logins for salesforce.com

519,568

leaked credentials · 2,888 compromised devices

Top exposed customer accounts

tmo.schan***@in.ibm.com.bwdevswas104

tmo.schan***@in.ibm.com.staging295

tmo.swastika.rajkho***@t-mobile.com.bwdevswas79

abhay***@in.ibm.com.tcccchatter.tcccdev1377

tmo.swastika.rajkho***@t-mobile.com.staging277

Most targeted services

test.salesforce.com48,357

vmware.my.salesforce.com3,800

www.salesforce.com3,730

ap4.salesforce.com2,434

535,500

Exposed Credentials

2,924

Compromised Devices

Credit Cards

Crypto Wallets

3,648

Auth Tokens

7,302,246

Stolen Cookies

Exposure over time (credentials leaked per month)

2024-012026-05

Corporate SaaS & shadow-IT exposed (employee logins to third-party services)

Salesforce2,180

Amazon/AWS288

Microsoft 365277

Most common passwords 1% reuse a top-10 password

Pa***23620

Ne***79432

1S***sh429

Al***23400

P@***rd378

Ba***23351

no***23298

Sa***23283

Sa***00277

Sa***e1244

Stolen sessions (active cookies that can bypass MFA)

youtube.com216,328

google.com133,484

pubmatic.com80,818

adnxs.com78,773

bing.com69,722

criteo.com61,397

Compromised despite antivirus (AV installed on infected devices)

Windows Defender23

Avast Antivirus3

ESET Security2

Kaspersky Internet Security1

Financial, crypto & app tokens

Crypto wallets

metamask49

coinbase7

okx6

phantom4

exodus3

App / session tokens

Google3,292

Discord221

Telegram135

Where devices were compromised (by country)

IN7

Argentina [AR]6

PH5

Peru [PE]5

Mexico [MX]4

Top cities

Lima3

College Park2

Hurlingham2

San José2

San Luis Potosí City2

Browsers & apps affected

Google Chrome (Default)829

Microsoft Edge (Default)719

Edge [Default]371

Google Chrome (Profile 1)281

Google Chrome (Profile 3)221

Google Chrome (Profile 2)210

Stealer malware families seen

RedLine RisePro

Related companies

Explore

Check your own exposure →

Free dark web & attack-surface check by ShadowMap

Figures are aggregate counts derived from dark web stealer logs and public breach data. Data is indicative and updated periodically.