Red Hat
Data Breach on October 07, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | redhat.com | ||
| Threat Actor | ScatteredLAPSUSHunters | ||
| Date Discovered | Oct 07, 2025 | ||
| Description | Red Hat, Inc. is an enterprise open-source software company based in Raleigh, North Carolina, USA (now an IBM subsidiary), providing Linux, middleware, cloud and Kubernetes solutions. | ||
| Leak Size | Unknown |
Credential Exposure for redhat.com
We've indexed 3,995 @redhat.com accounts from external breaches, plus 65,859 credentials for redhat.com itself.
Last checked Aug 16, 2026
| @redhat.com addresses from external breaches | |
|---|---|
| Third-party breaches | 3,672 accounts · across 324 breaches · 3,321 with a plaintext password · most recent Jan 8, 2026 |
| Combo lists | 923 accounts · most recent Aug 15, 2026 |
| Phishing pages | 29 accounts · most recent Aug 12, 2026 |
| Passwords for redhat.com accounts | |
|---|---|
| Combo lists | 54,010 logins · most recent Aug 15, 2026 |
| Infostealer logs | 22,471 logins · 14,929 infected devices · most recent Aug 8, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Red Hat was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.