Malware log
June 2026 Stealer Logs
56 278 397 addresses collected by malware, in a log dated 2026-06-15: not accounts taken from a breached service.
Breached2026-06-15Added to HIBP2026-06-15 UTCUpdated by HIBP2026-06-15 UTCAddresses56 278 397Domain—
VerifiedStealer log
What happened in Have I Been Pwned’s words
In June 2026, a collection of accumulated stealer logs from various sources was added to HIBP. The corpus comprised 56M unique email addresses across hundreds of millions of stealer log records. The data also contained 124M unique passwords, which have been added to Pwned Passwords and are now searchable. Individuals can view any records captured against their email address in the stealer logs section of their dashboard. Organisations can see logs affecting their domain via the stealer logs API.
Exposed data as HIBP classifies it
- Email addresses
- Passwords
How HIBP qualifies it
- HIBP verified that the data came from this service.
- Credentials captured by infostealer malware on victims’ own devices.
HIBP names no domain for this breach.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC