Malware log
Synthient Stealer Log Threat Data
182 962 095 addresses collected by malware, in a log dated 2025-04-11: not accounts taken from a breached service.
Breached2025-04-11Added to HIBP2025-10-21 UTCUpdated by HIBP2025-10-21 UTCAddresses182 962 095Domain—
VerifiedStealer log
What happened in Have I Been Pwned’s words
During 2025, Synthient aggregated billions of records of "threat data" from various internet sources. The data contained 183M unique email addresses alongside the websites they were entered into and the passwords used. After normalising and deduplicating the data, 183 million unique email addresses remained, each linked to the website where the credentials were captured, and the password used. This dataset is now searchable in HIBP by email address, password, domain, and the site on which the credentials were entered.
Exposed data as HIBP classifies it
- Email addresses
- Passwords
How HIBP qualifies it
- HIBP verified that the data came from this service.
- Credentials captured by infostealer malware on victims’ own devices.
HIBP names no domain for this breach.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC