ShadowMap

Dark Web Exposure for zoho.com

Credentials, devices and data found in dark web stealer logs & breaches
100
Exposure level: Critical
zoho.com scores 100/100 based on leaked credentials, compromised devices, and stolen financial & session data found on the dark web.
Most recent exposure 20 days ago Last 90 days +19% 1% reuse a top-10 password
Employee exposure
corporate accounts — @zoho.com
454,527
leaked credentials · 1,076 compromised devices
Top exposed employee accounts
dataken***@zoho.com508
conrad.cas***@zoho.com232
shauw***@zoho.com225
kan***@zoho.com185
ablan.g***@zoho.com172
Where staff accounts were caught
accounts.google.com18,186
smtp.zoho.com13,246
www.facebook.com9,598
login.live.com8,857
accounts.zoho.com8,496
Customer exposure
stolen logins for zoho.com
1,153,071
leaked credentials · 5,284 compromised devices
Top exposed customer accounts
admin19
info19
nessm***@emdadtc.com13
recept***@dihcg.com12
dasanikrish.var***@gmail.com12
Most targeted services
accounts.zoho.com661,475
www.zoho.com173,267
smtp.zoho.com72,049
mail.zoho.com63,401
mailadmin.zoho.com60,416
1,585,180
Exposed Credentials
5,366
Compromised Devices
3
Credit Cards
482
Crypto Wallets
9,973
Auth Tokens
19,048,793
Stolen Cookies

Exposure over time (credentials leaked per month)

2024-012026-05

Corporate SaaS & shadow-IT exposed (employee logins to third-party services)

Zoho22,418
Google Workspace19,386
Microsoft 36514,528
Amazon/AWS5,178
LinkedIn2,363
Adobe1,244

Most common passwords 1% reuse a top-10 password

La***052,639
AZ***c#2,087
ly***nx701
12***78583
Cr***ho553
12***89540
12***!!460
12***56456
Fo***@#367
te***se367

Stolen sessions (active cookies that can bypass MFA)

youtube.com608,125
google.com351,344
pubmatic.com208,404
adnxs.com200,415
bing.com183,896
criteo.com163,185

Compromised despite antivirus (AV installed on infected devices)

Windows Defender494
McAfee48
Avast Antivirus32
360 Total Security16
Kaspersky9
Panda Dome6

Financial, crypto & app tokens

Crypto wallets
metamask240
phantom110
trust45
exodus32
bitget15
tron15
App / session tokens
Google9,294
Discord420
Telegram259

Where devices were compromised (by country)

Mexico [MX]129
Colombia [CO]83
Peru [PE]60
Argentina [AR]44
Chile [CL]37
Top cities
Lima28
Bogotá14
Acapulco de Juárez13
Caracas12
Santiago11

Browsers & apps affected

Google Chrome (Default)969
Microsoft Edge (Default)879
Edge [Default]539
Chrome [Default]354
Google Chrome (Profile 1)284
android:facebook.com214

Stealer malware families seen

RedLine RisePro

Related companies

Explore

Check your own exposure →

Free dark web & attack-surface check by ShadowMap

Figures are aggregate counts derived from dark web stealer logs and public breach data. Data is indicative and updated periodically.