Malware log
Stealer Logs, Jan 2025
71 039 833 addresses collected by malware, in a log dated 2025-01-13: not accounts taken from a breached service.
Breached2025-01-13Added to HIBP2025-01-13 UTCUpdated by HIBP2025-01-15 UTCAddresses71 039 833Domain—
VerifiedStealer log
What happened in Have I Been Pwned’s words
In January 2025, stealer logs with 71M email addresses were added to HIBP. Consisting of email address, password and the website the credentials were entered against, this breach marks the launch of a new HIBP feature enabling the retrieval of the specific websites the logs were collected against. The incident also resulted in 106M more passwords being added to the Pwned Passwords service.
Exposed data as HIBP classifies it
- Email addresses
- Passwords
How HIBP qualifies it
- HIBP verified that the data came from this service.
- Credentials captured by infostealer malware on victims’ own devices.
HIBP names no domain for this breach.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC