1,217 US Accounts Exposed in the DAMN ISRAEL OTTOHELP Jun 2023 Breach

Two June Batches, One Day: The Smaller DAMN_ISRAEL OTTOHELP June 2023 Release

On October 18, 2023, DAMN_ISRAEL OTTOHELP released not one but two seperate batches of June 2023 stealer log data. The 58 PCS June 2023 collection -- this batch -- contained 1,217 US credentials across 58 log files, averaging approximately 21.0 records per file. Its counterpart, the 236 PCS June 2023 release, contained 5,552 records across a much larger file set. The reasons for splitting a single month's acumulated data into two distinct releases are not documented in the metadata, but the pattern suggests either different collection sub-campaigns within June or different infrastructure sources that the operator organized separately before the October 18 mass dump.

DAMN_ISRAEL OTTOHELP 58 PCS Jun 2023 (October 2023): Stealer Log Summary

• Records Exposed: 1,217
• Data Types: Email addresses, plaintext passwords, URLs
• Breach Type: Stealer log -- credentials harvested from malware-infected endpoints, not a direct database breach
• Password Type: Plaintext -- captured directly from browser sessions and credential stores by infostealer malware
• Country: United States
• Date Leaked: October 18, 2023

The Smaller June Batch in a Month With Two Releases

The 58 PCS June 2023 batch is the smaller of two June 2023 releases from the same operator. The 236 PCS batch delivered more than four times the record count and more than four times the file count. Despite its smaller scale, the 58 PCS batch still represents a distinct collection campagn -- 58 individual infected endpoints, each contributing an average of 21 credentials to the total. Per-file density in this batch is slightly higher than the larger June release, suggesting the 58 logs may represent higher-value machines or sessions captured earlier in the month.

The Scale of the DAMN_ISRAEL OTTOHELP Archive Dump

Viewed in context, the 58 PCS June 2023 batch is one piece of a much larger single-day event. DAMN_ISRAEL OTTOHELP released batches spanning February, April, May, June (twice), July, August, September, and October 2023 on the same day -- October 18. Combined record counts across confirmed batches exceed 35,000 US credentials from a single operator. The archive dump model allowed the operator to accumulate an entire year of stealer log data before distributing it in a coordinated mass release, maximizing impact by flooding Telegram channels with months of material simultaneously rather than trickling out small batches over time.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion exposed records, including stealer log data from multi-batch archive dumps like the DAMN_ISRAEL OTTOHELP October 18 release. If your credentials appeared in the June 2023 batch or any other batch in the series, a free scan at HEROIC's breach scanner can confirm whether your data is in the index.