Malware log
Operation Endgame 3.0
2 046 030 addresses collected by malware, in a log dated 2025-11-13: not accounts taken from a breached service.
Breached2025-11-13Added to HIBP2025-11-13 UTCUpdated by HIBP2025-11-13 UTCAddresses2 046 030Domain—
VerifiedMalware
What happened in Have I Been Pwned’s words
Between 10 and 13 November 2025, the latest phase of Operation Endgame was coordinated from Europol's headquarters in The Hague. The actions targeted one of the biggest infostealer Rhadamanthys, the Remote Access Trojan VenomRAT, and the botnet Elysium, all of which played a key role in international cybercrime. Authorities took down these three large cybercrime enablers and provided 2 million impacted email addresses and 7.4 million passwords to HIBP.
Exposed data as HIBP classifies it
- Email addresses
- Passwords
How HIBP qualifies it
- HIBP verified that the data came from this service.
- Collected by malware rather than taken from the service.
HIBP names no domain for this breach.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC