Exposed Credentials Data Considerations

When classifying observations as Exposed Credential data, discovered email domains are matched with email domains owned by Bitsight customers. However, many websites do not actually validate email addresses, which makes it difficult to assert that certain exposed records are associated with company employees.