June 2026 Stealer Logs data breach
56,278,397 accounts exposed.
Check whether your email is included on Have I Been Pwned.
What was exposed
Email addressesPasswords
What to do
- Change your June 2026 Stealer Logs password, and the password on any other site where you used the same one.
- Expect more phishing emails that mention this service. Do not click links in them; go to the site directly.
- Turn on two-step verification wherever it is offered, and use a password manager.
About this breach
In June 2026, a collection of accumulated stealer logs from various sources was added to HIBP. The corpus comprised 56M unique email addresses across hundreds of millions of stealer log records. The data also contained 124M unique passwords, which have been added to Pwned Passwords and are now searchable. Individuals can view any records captured against their email address in the stealer logs section of their dashboard. Organisations can see logs affecting their domain via the stealer logs API.