June 2026 Stealer Logs

Trustworthiness

Verified by a specialist service

accounts: 56,278,397
Breach happened: 15 June 2026
Added to the register: 15 June 2026

In June 2026, a collection of accumulated stealer logs from various sources was added to HIBP. The corpus comprised 56M unique email addresses across hundreds of millions of stealer log records. The data also contained 124M unique passwords, which have been added to Pwned Passwords and are now searchable. Individuals can view any records captured against their email address in the stealer logs section of their dashboard. Organisations can see logs affecting their domain via the stealer logs API.

What leaked

Passwords

Whoever has it can do everything you can do in this account — use a card saved on it, change your plan, read whatever you keep there. And if you used it anywhere else, those accounts too.
Do this now
- Change your password on June 2026 Stealer Logs
- Change it on every other site where you used the same one Password managers →
- Turn on two-factor authentication wherever it is offered Two-factor authentication →
Email address

The address every one of these scams will arrive at.

Phishing →

What is not listed

Bank details
Card numbers
Identity documents

The record shows what was found in the data. Not listed is not the same as proven untouched.

Source

A specialist service holds the stolen data, checks it is genuine, and lets anyone search their own address in it. The strongest evidence short of an official source.

Verification service

Have I Been Pwned

Under licence CC BY 4.0

Collects leaked files, checks they are genuine, and lets anyone search their own address in them. Run by one security researcher since 2013.

See the source →