Malware log
Operation Endgame
16 466 858 addresses collected by malware, in a log dated 2024-05-30: not accounts taken from a breached service.
Breached2024-05-30Added to HIBP2024-05-30 UTCUpdated by HIBP2025-05-23 UTCAddresses16 466 858Domain—
VerifiedMalware
What happened in Have I Been Pwned’s words
In May 2024, a coalition of international law enforcement agencies took down a series of botnets in a campaign they coined "Operation Endgame". Data seized in the operation included impacted email addresses and passwords which were provided to HIBP to help victims learn of their exposure.
Exposed data as HIBP classifies it
- Email addresses
- Passwords
How HIBP qualifies it
- HIBP verified that the data came from this service.
- Collected by malware rather than taken from the service.
HIBP names no domain for this breach.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC