Malware log
Data Troll Stealer Logs
109 532 219 addresses collected by malware, in a log dated 2025-06-20: not accounts taken from a breached service.
Breached2025-06-20Added to HIBP2025-08-13 UTCUpdated by HIBP2025-08-13 UTCAddresses109 532 219Domain—
VerifiedStealer log
What happened in Have I Been Pwned’s words
In June 2025, headlines erupted over a "16 billion password" breach. In reality, the dataset was a compilation of publicly accessible stealer logs, mostly repurposed from older leaks, with only a small portion of genuinely new material. HIBP received 2.7B rows containing 109M unique email addresses, which was subsequently added to the service under the name "Data Troll". The websites the stealer logs were captured against are searchable via the HIBP dashboard.
Exposed data as HIBP classifies it
- Email addresses
- Passwords
How HIBP qualifies it
- HIBP verified that the data came from this service.
- Credentials captured by infostealer malware on victims’ own devices.
HIBP names no domain for this breach.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC