Malware log
Stealer Logs Posted to Telegram
26 105 473 addresses collected by malware, in a log dated 2024-07-18: not accounts taken from a breached service.
Breached2024-07-18Added to HIBP2024-08-01 UTCUpdated by HIBP2025-03-04 UTCAddresses26 105 473Domain—
VerifiedStealer log
What happened in Have I Been Pwned’s words
In July 2024, info stealer logs with 26M unique email addresses were collated from malicious Telegram channels. The data contained 22GB of logs consisting of email addresses, passwords and the websites they were used on, all obtained by malware running on infected machines.
Exposed data as HIBP classifies it
- Email addresses
- Passwords
How HIBP qualifies it
- HIBP verified that the data came from this service.
- Credentials captured by infostealer malware on victims’ own devices.
HIBP names no domain for this breach.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC